« Volver al listado

CVE-2023-50429

Estado: ModificadaCrítica (9.1)—

IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Izybat — Orange Casiers

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-50429",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-12-09T22:15:07.177",
  "references": [
    {
      "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-mc3w-rv8p-f9xf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/orangecertcc/security-research/security/advisories/GHSA-mc3w-rv8p-f9xf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection."
    },
    {
      "lang": "es",
      "value": "Los casiers IzyBat Orange anteriores a 20230803_1 permiten la inyección SQL en conjunto getEnsemble.php."
    }
  ],
  "lastModified": "2026-06-17T06:39:36.463",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:izybat:orange_casiers:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D80BCAB-E7AD-4841-870D-0E475D563112",
              "versionEndExcluding": "20230803_1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}