CVE-2023-31433

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-05-02

Last modified

2025-01-30

Weaknesses

CWE-89

Affected products

• Evasys (Evasys)

References

• https://cves.at/posts/cve-2023-31433/writeup/