CVE-2023-3689

Summary

CVE-2023-3689 is a critical vulnerability affecting Bylancer QuickQR 6.3.7. This issue lies in an unidentified functionality of the component's GET Parameter Handler within the /blog file. An attacker can exploit this vulnerability via sql injection, which can be executed remotely. The argument 's' is the manipulation target, and the associated vulnerability identifier is VDB-234235. Despite early disclosure, the vendor has not responded to remediation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.