high8.0
CVE-2023-50395
SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform.
Impact
SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Solarwinds Platform | before 2024.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395