CVE-2023-33967
8.3
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Summary
EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| megaease | easeprobe | < 2.1.0 | affected |
Weaknesses
- CWE-89: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
ADP Enrichment
CVE Program Container
Additional References
- https://github.com/megaease/easeprobe/security/advisories/GHSA-4c32-w6c7-77x4
- https://github.com/megaease/easeprobe/pull/330
- https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1
- https://github.com/megaease/easeprobe/releases/tag/v2.1.0
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://github.com/megaease/easeprobe/security/advisories/GHSA-4c32-w6c7-77x4
- https://github.com/megaease/easeprobe/pull/330
- https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1
- https://github.com/megaease/easeprobe/releases/tag/v2.1.0
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.