GitHub Advisoryadvisory · npm

GHSA-p46g-8c3q-89p2 FUXA SQL Injection vulnerability

CRITICAL Published 2023-09-22 Modified 2023-09-25 Official page ↗
Aliases
CVE-2023-31719
Ecosystem
npm
Packages
fuxa-server
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2023-09-22

Affected packages

• npm fuxa-server: <= 1.1.12 (no fix yet)

Description

FUXA <= 1.1.12 is vulnerable to SQL Injection via `/api/signin`.

Related

Alias · CVE (1)

  • CVE-2023-31719 FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References