CVE-2023-4662

Critical

Published: 15/09/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in Saphira Connect allows Remote Code Inclusion with unnecessary privileges. This issue affects Saphira Connect versions before 9.

Risk Assessment

The organization may be exposed to remote code execution, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update Saphira Connect to version 9 or later to mitigate this vulnerability.

Other vulnerabilities in Saphira Connect

See all

CVE-2023-4665High
CVE-2023-4665 describes an incorrect execution-assigned permissions vulnerability in Saphira Connect that allows privilege escalation.
CVE-2023-4661Critical
CVE-2023-4661 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in Saphira Connect versions before 9.

Original NVD description (English source)

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: before 9.