CVE-2023-4531

Critical

Published: 05/09/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-4531 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in Mestav's e-commerce software. This issue affects versions of the software before 20230901.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to data disclosure or modification. This poses a significant risk to the organization's data security.

Recommendation

It is recommended to update the e-commerce software to a version after 20230901 to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify other potential weaknesses.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestav Software E-commerce Software allows SQL Injection. This issue affects E-commerce Software: before 20230901 .