CVE-2023-5784: Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection
First published: Thu Oct 26 2023(Updated: )
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243590 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| =6.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection?
The vulnerability ID for Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection is CVE-2023-5784.
What is the severity of CVE-2023-5784?
CVE-2023-5784 has a severity of critical.
Which version of Netentsec NS-ASG Application Security Gateway is affected?
Version 6.3 of Netentsec NS-ASG Application Security Gateway is affected.
What is the CWE category for this vulnerability?
The CWE category for this vulnerability is CWE-89 (SQL Injection).
Are there any known fixes or patches for this vulnerability?
Currently, there are no known fixes or patches available for this vulnerability. It is recommended to apply any official updates or security releases from the vendor when they become available.
- agent/type
- agent/first-publish-date
- agent/references
- agent/severity
- agent/author
- agent/title
- agent/weakness
- collector/epss-latest
- source/FIRST
- agent/description
- agent/epss
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/netentsec
- canonical/netentsec application security gateway
- version/netentsec application security gateway/6.3