CVE-2023-7333
Last modified
CVE-2023-7333 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
A weakness has been identified in bluelabsio records-mover up to 1.5.4. The affected element is an unknown function of the component Table Object Handler. This manipulation causes sql injection. The attack needs to be launched locally. Upgrading to version 1.6.0 is sufficient to fix this issue. Patch name: 3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa. You should upgrade the affected component.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2023-7333?
How severe is CVE-2023-7333?
How do I fix CVE-2023-7333?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-7327Ozeki SMS Gateway versions up to and including 10.3.208 cont…8.7
- CVE-2023-7328Screen SFT DAB 600/C firmware versions up to and including 1…5.3
- CVE-2023-7329Tinycontrol LAN Controller v3 (LK3) firmware versions up to …8.7
- CVE-2023-7330Ruijie NBR series routers contain an unauthenticated arbitra…9.3
- CVE-2023-7331A vulnerability was detected in PKrystian Full-Stack-Bank up…5.1
- CVE-2023-7332PocketMine-MP versions prior to 4.18.1 contain an improper i…7.1
- CVE-2023-7334Changjetong T+ versions up to and including 16.x contain a .…9.8
- CVE-2023-7335EduSoho versions prior to 22.4.7 contain an arbitrary file r…8.7
- CVE-2023-7337The JS Help Desk – AI-Powered Support & Ticketing System plu…7.5
- CVE-2023-7338Ruckus Unleashed contains a remote code execution vulnerabil…7.7
- CVE-2023-7339Stack-based buffer overflow vulnerability in Softing Industr…6.5
- CVE-2023-7340Wazuh authd contains a heap-buffer overflow vulnerability th…4.3
Are you affected by CVE-2023-7333?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST