CVE-2023-41640

HighCVSS 8.8

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

CVE-2023-41640 describes an improper error handling vulnerability in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38, allowing attackers to obtain sensitive technical information via a crafted SQL query.

Risk Assessment

The organization may be exposed to the disclosure of sensitive technical information, potentially leading to further attacks or security breaches.

Recommendation

It is recommended to update the application to the latest version and implement appropriate error handling mechanisms to minimize the risk of information disclosure.

Other vulnerabilities in ErroreNonGestito.aspx

CVE-2023-41642Medium
Multiple reflected XSS vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.

Original NVD description (English source)

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS