CVE-2023-38839

Summary

CVE-2023-38839 is a newly-discovered SQL injection vulnerability affecting the Kidus Minimati version 1.0.0. An attacker can exploit this flaw by manipulating the ID parameter in the fulldelete.php component to inject malicious SQL queries and gain unauthorized access to sensitive information. Successful exploitation of this vulnerability may lead to the leakage of confidential data, putting organizations using the Kidus Minimati software at risk. It is imperative that users update their software to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.