CVE-2023-3651

Summary

CVE-2023-3651 is a critical SQL Injection vulnerability affecting Digital Ant E-Commerce Software versions before 11. The issue stems from a failure to properly neutralize special elements in SQL commands, enabling an attacker to inject malicious SQL code and potentially gain unauthorized access to sensitive data or even take control of the affected system. This vulnerability poses a significant risk to e-commerce businesses using the Digital Ant software and should be addressed promptly by applying the available patch or upgrade.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.