Vulnerability Details CVE-2023-28883
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.8%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3
- https://zigrin.com/advisories/cerebrate-blind-sql-injection/
- https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3
- https://zigrin.com/advisories/cerebrate-blind-sql-injection/
Products affected by CVE-2023-28883
-
cpe:2.3:a:cerebrate-project:cerebrate:1.13