CVE-2023-4671

Critical

Published: 28/12/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-4671 describes an improper neutralization of special elements used in SQL commands, allowing command line execution through SQL Injection in Talent Software ECOP.

Risk Assessment

This vulnerability may lead to unauthorized access to the system and execution of malicious commands, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update the ECOP software to version 32255 or later to mitigate this vulnerability and conduct a security audit of the system.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.