CVE-2023-50395: SQL Injection Remote Code Execution Vulnerability
Published Feb 6, 2024
·Updated
SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited
Affected Software
1 affected component
SolarWinds SolarWinds Platform<2024.1
Remediation
Information
SolarWinds recommends that customers upgrade to the SolarWinds Platform 2024.1
Event History
Feb 6, 2024
CVE Published
via MITRE·03:59 PM
Data Sourced
via MITRE·03:59 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Aug 25, 56091
Event
via NVD·11:44 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-50395?
CVE-2023-50395 is classified as a high severity SQL Injection vulnerability that can lead to remote code execution.
2
How do I fix CVE-2023-50395?
To fix CVE-2023-50395, update your SolarWinds Platform to version 2024.1 or later.
3
Who is affected by CVE-2023-50395?
CVE-2023-50395 affects users of the SolarWinds Platform versions prior to 2024.1.
4
What type of attack does CVE-2023-50395 facilitate?
CVE-2023-50395 facilitates SQL Injection attacks, allowing for remote code execution if exploited.
5
Does CVE-2023-50395 require authentication for exploitation?
Yes, CVE-2023-50395 requires user authentication to be exploited.