~/products/thinking_software_technology_co_ltd/efence

pipeline liveDigest Docs

Thinking Software Technology Co Ltd Efence vulnerabilities

1 known vulnerability affecting thinking_software_technology_co_ltd/efence.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2023-22900P2CRITICALCVSS 9.8v1.2.58 DB.ver 282023-01-31

CVE-2023-22900 [CRITICAL] CWE-89 CVE-2023-22900: Efence login function has insufficient validation for user input. An unauthenticated remote attacker Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify or delete database.

Thinking Software Technology Co Ltd Efence vulnerabilities | cvebase