CVE-2023-39021
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jul 28, 2023
Updated: Aug 3, 2023
CWE ID 94
Summary
CVE-2023-39021: A code injection vulnerability has been identified in wix-embedded-mysql version 4.6.1 and below. This issue lies in the component com.wix.mysql.distribution.Setup.apply, which fails to check arguments appropriately. A malicious user can potentially exploit this flaw by passing unchecked inputs, leading to arbitrary code execution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Wix.com Ltd