CVE-2023-26443

Summary

CVE-2023-26443 is a vulnerability affecting full-text autocomplete search features. It allows user-supplied SQL syntax to be injected into SQL statements, potentially leading to benign SQL exceptions or, in some cases, escalating to a malicious SQL injection attack. Although existing sanitization measures are in place, the vulnerability could be exploited to manipulate data or gain unauthorized access. This issue has been addressed by properly encoding single quotes for SQL FULLTEXT queries, and currently, no public exploits are known.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.