CVE-2023-33665
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
In ai-dev aitable versions before v0.2.2, a SQL injection vulnerability was discovered in the component /includes/ajax.php.
Risk Assessment
This vulnerability could allow attackers to access the database, potentially leading to the disclosure of sensitive information or data manipulation.
Recommendation
It is recommended to upgrade to version v0.2.2 or later to mitigate this vulnerability.
Other vulnerabilities in /includes/ajax.php
See all- CVE-2023-33666Critical
Versions before 0.1.3 of the ai-dev aioptimizedcombinations library were found to contain a SQL injection vulnerability via the component /includes/ajax.php.
- CVE-2023-33664High
In versions before 0.3.1 of the ai-dev aicombinationsonfly library, a SQL injection vulnerability was discovered in the /includes/ajax.php component.
Original NVD description (English source)
ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.