CVE-2023-50589

Summary

CVE-2023-50589 is a newly discovered SQL injection vulnerability affecting the Grupo Embras GEOSIAP ERP version 2.2.167.02. An attacker can exploit this vulnerability by injecting malicious SQL code through the codLogin parameter on the login page. Successful exploitation may lead to unauthorized access to sensitive data or even system takeover. Users are advised to update their ERP systems as soon as possible to mitigate this risk. Failure to address this vulnerability may result in significant data breaches and financial losses.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.