CVE-2023-35066

Summary

CVE-2023-35066 is an SQL Injection vulnerability found in Infodrom Software E-Invoice Approval System before version 20230701. This vulnerability allows for improper neutralization of special elements used in an SQL command, posing a high risk to the confidentiality and integrity of affected organizations. The vulnerability has a base score of 9.8 out of 10, indicating its critical nature. There have been 53 reported instances of this vulnerability. To remediate the issue, organizations should update their E-Invoice Approval System to version 20230701 or later.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.