CVE-2023-39939

Summary

CVE-2023-39939 is a critical SQL injection vulnerability affecting LuxCal Web Calendar versions prior to 5.2.3M (MySQL) and 5.2.3L (SQLite). An unauthenticated attacker can exploit this flaw to execute arbitrary SQL queries against the calendar's database, potentially gaining access to sensitive information or making alterations to it. This vulnerability poses a significant risk to the confidentiality and integrity of data stored in the affected systems. Users are strongly advised to update their LuxCal Web Calendar installations to the latest patched versions to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.