CVE-2023-3686

MediumCVSS 6.3

Published: 16/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

34th percentile - higher than 34% of all known CVEs

Summary

A critical vulnerability was found in Bylancer QuickAI OpenAI 3.8.1, affecting unknown code in the /blog file of the GET Parameter Handler component. Manipulation of the argument s leads to SQL injection.

Risk Assessment

An attacker can remotely exploit this vulnerability, posing a serious threat to the security of data within the organization.

Recommendation

It is recommended to immediately update the software to the latest version to eliminate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-234232. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.