CVE-2023-0575

External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.0.0

• CWE-94
• CWE-642

• https://www.yugabyte.com/Product
• https://www.yugabyte.com/Product

Published

Feb 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0568In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X be…8.1
• CVE-2023-0569Weak Password Requirements in GitHub repository publify/publ…6.5
• CVE-2023-0570A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-0571A vulnerability has been found in SourceCodester Canteen Man…5.4
• CVE-2023-0572Unchecked Error Condition in GitHub repository froxlor/froxl…5.3
• CVE-2023-0574Server-Side Request Forgery (SSRF), Improperly Controlled Mo…9.8
• CVE-2023-0576Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-0577Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-0578Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-0579The YARPP WordPress plugin before 5.30.3 does not validate a…8.8
• CVE-2023-0580Insecure Storage of Sensitive Information vulnerability in A…9.8
• CVE-2023-0581The PrivateContent plugin for WordPress is vulnerable to pro…5.3