CVE-2023-40121

Summary

CVE-2023-40121 is a vulnerability affecting the appendEscapedSQLString function in DatabaseUtils.java. This issue stems from unsafe deserialization, which creates a risk of SQL injection. An attacker can exploit this vulnerability to disclose local information, even without user interaction. However, it's important to note that for successful exploitation, the attacker needs User execution privileges.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.