CVE-2023-45684

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.

• CWE-89

• https://cfengine.com/blog/2023/cve-2023-45684/Vendor Advisory
• https://cfengine.com/blog/2023/cve-2023-45684/Vendor Advisory

Published

Nov 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45679stb_vorbis is a single file MIT licensed library for process…7.8
• CVE-2023-4568PaperCut NG allows for unauthenticated XMLRPC commands to be…6.5
• CVE-2023-45680stb_vorbis is a single file MIT licensed library for process…5.5
• CVE-2023-45681stb_vorbis is a single file MIT licensed library for process…7.8
• CVE-2023-45682stb_vorbis is a single file MIT licensed library for process…7.1
• CVE-2023-45683github.com/crewjam/saml is a saml library for the go languag…6.1
• CVE-2023-45685Insufficient path validation when extracting a zip archive i…9.1
• CVE-2023-45686Insufficient path validation when writing a file via WebDAV …7.2
• CVE-2023-45687A session fixation vulnerability in South River Technologies…8.8
• CVE-2023-45688Lack of sufficient path validation in South River Technologi…4.3
• CVE-2023-45689Lack of sufficient path validation in South River Technologi…6.5
• CVE-2023-4569A memory leak flaw was found in nft_set_catchall_flush in ne…5.5