CVE-2023-28019

Summary

CVE-2023-28019 is a vulnerability affecting Bigfix WebUI API App versions below 14. This issue stems from insufficient validation, allowing authenticated WebUI users to execute unparameterized SQL queries. The consequence is a potential SQL injection attack, posing a significant security risk. Attackers could manipulate SQL queries to access sensitive data or even execute malicious code within the system. Organizations using the affected version should promptly update to a secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.