CVE-2023-52096
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Dec 26, 2023
Updated: Jan 4, 2024
CWE ID 89
Summary
CVE-2023-52096 is a vulnerability affecting the SteVe Community's ocpp-jaxb library before version 0.0.8. When an application receives a StartTransaction message with an invalid timestamp parameter, such as one with a month value of 00, the library generates an incorrect timestamp. This issue can result in a SQL exception in the application, potentially compromising the integrity of transaction records.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share