CVE-2023-28394

Summary

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well.

Affected Software

Weaknesses

• Code injection

ADP Enrichment

CVE Program Container

Additional References

• https://www.beekeeperstudio.io/
• https://github.com/beekeeper-studio/beekeeper-studio
• https://jvn.jp/en/jp/JVN11705010/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.beekeeperstudio.io/
• https://github.com/beekeeper-studio/beekeeper-studio
• https://jvn.jp/en/jp/JVN11705010/

• ←Previous
• Next→