Description
A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.
Remediation
References
https://github.com/MateusTesser/CVE-2023-31717
https://github.com/frangoteam/FUXA
https://youtu.be/IBMXTEI_5wY
Related Vulnerabilities
CVE-2021-34082 Vulnerability in npm package proctree
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-list
CVE-2022-25167 Vulnerability in maven package org.apache.flume.flume-ng-sources:flume-jms-source
CVE-2022-2596 Vulnerability in maven package org.webjars.npm:node-fetch
CVE-2018-1062 Vulnerability in maven package org.ovirt.engine.core:vdsbroker