CVE-2023-45826: Authenticated SQL Injection in leantime
Leantime is an open source project management system. A 'userId' variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impacted as it allows for dumping information from the database. This issue has been addressed in version 2.4-beta-4. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-45826?
CVE-2023-45826 is an SQL injection vulnerability in Leantime, an open source project management system.
How does the SQL injection vulnerability in CVE-2023-45826 occur?
The vulnerability occurs due to the 'userId' variable in 'app/domain/files/repositories/class.files.php' not being parameterized.
What is the severity of CVE-2023-45826?
The severity of CVE-2023-45826 is medium with a CVSS score of 6.5.
How can an attacker exploit CVE-2023-45826?
An authenticated attacker can exploit CVE-2023-45826 by sending a carefully crafted POST request to '/api/jsonrpc'.
How can I fix CVE-2023-45826?
To fix CVE-2023-45826, it is recommended to update Leantime to version 2.4 or higher.