CVE-2023-45674CWE-89

SQL injection vulnerability in Farmbot-Web-App

High · published October 13, 2023

CVSS v3.1
7.7
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table). This issue may lead to Information Disclosure. This issue has been patched in version 15.8.4. Users are advised to upgrade. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2023-10-13T23:35Z
EPSS history
Timeline
  • 13 OCT 23:35Z
    SQL injection vulnerability in Farmbot-Web-App
    cvelistv5