Description
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.
Remediation
References
https://youtu.be/IBMXTEI_5wY
https://github.com/MateusTesser/CVE-2023-31717
https://github.com/frangoteam/FUXA
Related Vulnerabilities
CVE-2014-4671 Vulnerability in npm package hapi
CVE-2021-3827 Vulnerability in maven package org.keycloak:keycloak-saml-core
CVE-2020-28500 Vulnerability in maven package org.webjars:lodash
CVE-2022-39249 Vulnerability in npm package matrix-js-sdk
CVE-2018-3713 Vulnerability in npm package angular-http-server