Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2023-26439

The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement. Attackers with access to a lo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before getting executed as SQL statement. Attackers with access to a local or restricted network were able to perform arbitrary SQL queries, discovering other users cached data. We have improved the input check for API calls and filter for potentially malicious content. No publicly available exploits are known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OX Software GmbH OX App Suite

Default version status: unaffected

  • 0 to ≤ 8.10affected

References