CVE Catalog

CVE-2023-33762

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.85%

53th percentile - higher than 53% of all known CVEs

Summary

eMedia Consulting simpleRedak up to version 2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activity parameter.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to update the software to the latest version to eliminate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a SQL injection vulnerability via the Activity parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS