CVE-2023-43983: SQL Injection
Published Oct 5, 2023
·Updated
Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disablejson.php.
Affected Software
1 affected component
Presto-changeo Attribute Grid Prestashop<=2.0.3
Remediation
Event History
Oct 5, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-43983.
2
What is the severity of CVE-2023-43983?
The severity of CVE-2023-43983 is critical with a score of 9.8.
3
What is the affected software version of CVE-2023-43983?
The affected software version of CVE-2023-43983 is up to and including 2.0.3.
4
How was the vulnerability discovered in CVE-2023-43983?
The vulnerability was discovered in Presto Changeo attributegrid via the component disable_json.php.
5
How can I fix the SQL injection vulnerability in CVE-2023-43983?
To fix the SQL injection vulnerability in CVE-2023-43983, it is recommended to update to a version of Presto Changeo attributegrid that is higher than 2.0.3, as this version is affected.