CVE-2023-33366

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2023-08-03

Last modified

2024-10-17

Weaknesses

CWE-89

Affected products

• Biostar 2 (Supremainc)

References

• https://claroty.com/team82/disclosure-dashboard/cve-2023-33366
• https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291