CVE-2023-4445

Summary

CVE-2023-4445 is a critical vulnerability identified in Mini-Tmall up to version 20230811. This issue affects an unknown functionality of the file product, specifically when the orderBy argument is manipulated. The result is SQL injection, enabling remote attackers to execute malicious queries. The vulnerability has been publicly disclosed, increasing the risk of exploitation. VDB-237566 is the assigned identifier for this security flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.