CVE Catalog

CVE-2023-33666

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.52%

40th percentile - higher than 40% of all known CVEs

Summary

Versions before 0.1.3 of the ai-dev aioptimizedcombinations library were found to contain a SQL injection vulnerability via the component /includes/ajax.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update the ai-dev aioptimizedcombinations library to version 0.1.3 or later to mitigate this vulnerability.

Original NVD description (English source)

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS