{"id":"CVE-2023-7333","state":"PUBLISHED","title":"bluelabsio records-mover Table Object sql injection","description":"A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component.","publishedAt":"2026-01-07T23:02:10.309Z","updatedAt":"2026-02-23T08:20:49.086Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","source":"VulDB"},"assigner":"VulDB","products":["bluelabsio records-mover"],"affected":[{"vendor":"bluelabsio","product":"records-mover","versions":[{"version":"1.5.0","status":"affected"},{"version":"1.5.1","status":"affected"},{"version":"1.5.2","status":"affected"},{"version":"1.5.3","status":"affected"},{"version":"1.5.4","status":"affected"},{"version":"1.6.0","status":"unaffected"}],"modules":["Table Object Handler"]}],"references":["https://vuldb.com/?id.339566","https://vuldb.com/?ctiid.339566","https://github.com/bluelabsio/records-mover/pull/254","https://github.com/bluelabsio/records-mover/commit/3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa","https://github.com/bluelabsio/records-mover/releases/tag/v1.6.0","https://github.com/bluelabsio/records-mover/"],"weaknesses":["CWE-89","CWE-74"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/7xxx/CVE-2023-7333.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-7333","state":"PUBLISHED","datePublished":"2026-01-07T23:02:10.309Z","dateUpdated":"2026-02-23T08:20:49.086Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-01-05T16:41:29.940Z"},"containers":{"cna":{"title":"bluelabsio records-mover Table Object sql injection","descriptions":[{"lang":"en","value":"A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component."}],"affected":[{"vendor":"bluelabsio","product":"records-mover","versions":[{"version":"1.5.0","status":"affected"},{"version":"1.5.1","status":"affected"},{"version":"1.5.2","status":"affected"},{"version":"1.5.3","status":"affected"},{"version":"1.5.4","status":"affected"},{"version":"1.6.0","status":"unaffected"}],"modules":["Table Object Handler"]}],"references":[{"url":"https://vuldb.com/?id.339566","name":"VDB-339566 | bluelabsio records-mover Table Object sql injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.339566","name":"VDB-339566 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://github.com/bluelabsio/records-mover/pull/254","tags":["issue-tracking"]},{"url":"https://github.com/bluelabsio/records-mover/commit/3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa","tags":["patch"]},{"url":"https://github.com/bluelabsio/records-mover/releases/tag/v1.6.0","tags":["patch"]},{"url":"https://github.com/bluelabsio/records-mover/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","type":"CWE","lang":"en","description":"SQL Injection"}]},{"descriptions":[{"cweId":"CWE-74","type":"CWE","lang":"en","description":"Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-02-23T08:20:49.086Z"},"timeline":[{"time":"2023-10-30T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2023-10-30T00:00:00.000Z","lang":"en","value":"Countermeasure disclosed"},{"time":"2026-01-05T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-01-08T10:26:12.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"VulDB GitHub Commit Analyzer","type":"tool"}],"tags":["x_open-source"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-08T15:09:02.450923Z","id":"CVE-2023-7333","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-08T18:17:26.242Z"}}]}}}