CVE-2023-39643
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-39643 is a newly discovered SQL injection vulnerability affecting the Bl Modules xmlfeeds component before version 3.9.8. The issue resides in the SearchApiXml::Xmlfeeds() function, which is susceptible to SQL injection attacks. Malicious actors can exploit this vulnerability by inserting malicious SQL code into input fields, potentially gaining unauthorized access to sensitive data or taking control of the affected system. This vulnerability poses a significant risk to organizations using the Bl Modules xmlfeeds component and highlights the importance of keeping software up-to-date to mitigate potential cybersecurity threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.