Description

A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.

Remediation

References

https://github.com/frangoteam/FUXA

https://github.com/MateusTesser/CVE-2023-31717

https://youtu.be/IBMXTEI_5wY

Related Vulnerabilities

CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn

CVE-2020-7746 Vulnerability in maven package org.webjars.bowergithub.chartjs:chart.js

CVE-2018-8006 Vulnerability in maven package org.apache.activemq:activemq-web-console

CVE-2022-25912 Vulnerability in npm package simple-git

CVE-2020-7782 Vulnerability in npm package spritesheet-js

Severity

High

Classification

CWE-89 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Product Third Party Advisory Exploit