high8.2
CVE-2023-33967
SQL injection when using MySQL/PostgreSQL data checking
Impact
An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0; users should upgrade to this version. The vulnerability was discovered by the [Oxeye research](https://www.oxeye.io/) team.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/megaease/easeprobe | < 2.1.0 | 2.1.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Megaease | Easeprobe | before 2.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1
- https://github.com/megaease/easeprobe/pull/330
- https://github.com/megaease/easeprobe/releases/tag/v2.1.0
- https://github.com/megaease/easeprobe/security/advisories/GHSA-4c32-w6c7-77x4
- https://github.com/advisories/GHSA-4c32-w6c7-77x4
- https://nvd.nist.gov/vuln/detail/CVE-2023-33967