high6.5

CVE-2023-47438

SQL Injection vulnerability in Reportico Till

Impact

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

Affected packages

Ecosystem	Package	Affected	Fixed in
composer	`reportico-web/reportico`	<= 8.1.0	none recorded

Weakness classification

CWE-89

References

NVD record
CVE.org record
GitHub advisory
https://github.com/reportico-web/reportico/issues/52
https://github.com/advisories/GHSA-jjf4-959w-f545
https://nvd.nist.gov/vuln/detail/CVE-2023-47438