critical9.8
CVE-2023-28883
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
Impact
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cerebrate-Project | Cerebrate | Version 1.13 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3
- https://zigrin.com/advisories/cerebrate-blind-sql-injection/
- https://github.com/cerebrate-project/cerebrate/commit/5f1c99cd534442ec40c2129769608e3e61ff8be3
- https://zigrin.com/advisories/cerebrate-blind-sql-injection/