CVE-2023-34476

CriticalCVSS 9.8

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

CVE-2023-34476 vulnerability concerns improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data disclosure or modification.

It is recommended to implement proper input validation and sanitization mechanisms to prevent SQL Injection attacks.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.