Description
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.
Remediation
References
https://github.com/frangoteam/FUXA
https://github.com/MateusTesser/CVE-2023-31717
https://youtu.be/IBMXTEI_5wY
Related Vulnerabilities
CVE-2019-16777 Vulnerability in maven package org.webjars.npm:bin-links
CVE-2022-31198 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable
CVE-2018-1000844 Vulnerability in maven package com.squareup.retrofit2:converter-jaxb
CVE-2019-1003041 Vulnerability in maven package org.jenkins-ci.plugins:groovy
CVE-2019-10782 Vulnerability in maven package com.puppycrawl.tools:checkstyle