CVE Catalog

CVE-2023-33665

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.52%

40th percentile - higher than 40% of all known CVEs

Summary

In ai-dev aitable versions before v0.2.2, a SQL injection vulnerability was discovered in the component /includes/ajax.php.

Risk Assessment

This vulnerability could allow attackers to access the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to upgrade to version v0.2.2 or later to mitigate this vulnerability.

Original NVD description (English source)

ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS