farmbot の farmbot web app における SQL インジェクションの脆弱性
| Title |
farmbot の farmbot web app における SQL インジェクションの脆弱性
|
| Summary |
farmbot の farmbot web app には、SQL インジェクションの脆弱性が存在します。
|
| Possible impacts |
情報を取得される可能性があります。 |
| Solution |
ベンダアドバイザリまたはパッチ情報が公開されています。参考情報を参照して適切な対策を実施してください。 |
| Publication Date |
Oct. 14, 2023, midnight |
| Registration Date |
Dec. 25, 2023, 1:45 p.m. |
| Last Update |
Dec. 25, 2023, 1:45 p.m. |
|
CVSS3.0 : 警告
|
| Score |
6.5
|
| Vector |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected System
| farmbot |
|
farmbot web app 15.8.4 未満
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
その他
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2023年12月25日]
掲載 |
Dec. 25, 2023, 1:45 p.m. |
NVD Vulnerability Information
CVE-2023-45674
| Summary |
Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table). This issue may lead to Information Disclosure. This issue has been patched in version 15.8.4. Users are advised to upgrade. There are no known workarounds for this issue.
|
| Publication Date |
Oct. 14, 2023, 9:15 a.m. |
| Registration Date |
Oct. 14, 2023, 4 p.m. |
| Last Update |
Nov. 21, 2024, 5:27 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:farmbot:farmbot_web_app:*:*:*:*:*:*:*:* |
|
|
|
15.8.4 |
Related information, measures and tools
Common Vulnerabilities List