CVE-2023-33817: hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.

PriorityP352high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.55%

71.9th percentile

hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	hoteldruid	< hoteldruid 3.0.6-1 (sid)	hoteldruid 3.0.6-1 (sid)
digitaldruid	hoteldruid	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Target application is hoteldruid v3.0.5; presence of this version in the environment indicates potential exposure to SQL injection ↗

·The vulnerability is fixed in hoteldruid version 3.0.6-1 (Debian sid); systems running v3.0.5 on Debian bookworm and bullseye remain open/unpatched as of the tracked date ↗
·Scope is listed as local, which may limit remote exploitability depending on deployment configuration ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv8.8HIGH

vendor_debian8.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.