Vulnerability — CVE-2023-23634

CVE-2023-23634

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-23634
Description:: SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.
Last updated date:: 01/05/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/05/2024
Reference url to background: https://herolab.usd.de/en/security-advisories/usd-2022-0066/