CVE-2023-34477

CriticalCVSS 9.8

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

CVE-2023-34477 vulnerability concerns improper neutralization of special elements used in SQL commands, leading to SQL injection.

Risk Assessment

Exploitation of this vulnerability may allow attackers to access sensitive data in the database and potentially modify or delete data.

Recommendation

It is recommended to implement proper input validation and sanitization mechanisms and to update the application to the latest version to minimize the risk of attack.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.