CVE-2023-49363: SQL Injection
Published Dec 13, 2023
·Updated
Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php.
Affected Software
1 affected component
Rockoa RockOA<2.3.3
Event History
Dec 13, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-49363?
CVE-2023-49363 has a high severity due to its potential for compromising the database via SQL injection.
2
How do I fix CVE-2023-49363?
To fix CVE-2023-49363, upgrade Rockoa to version 2.3.3 or later, which addresses the SQL injection vulnerability.
3
What is affected by CVE-2023-49363?
CVE-2023-49363 affects Rockoa versions prior to 2.3.3, specifically through the indexAction method in reimpAction.php.
4
What kind of vulnerability is CVE-2023-49363?
CVE-2023-49363 is classified as an SQL injection vulnerability that allows attackers to manipulate database queries.
5
How can I detect CVE-2023-49363 in my application?
You can detect CVE-2023-49363 by checking the application version of Rockoa and testing for SQL injection in the affected indexAction method.