CVE-2023-3490

CriticalCVSS 9.8

Published: 30/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

There is an SQL Injection vulnerability in the GitHub repository fossbilling/fossbilling prior to version 0.5.3.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive information.

Recommendation

It is recommended to upgrade to version 0.5.3 or later to mitigate this vulnerability.

Original NVD description (English source)

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.