CVE-2023-49030

Summary

CVE-2023-49030 is a newly disclosed SQL Injection vulnerability affecting the web/user.php component of 32ns KLive versions prior to 2019-1-19. An attacker can exploit this weakness by delivering a specially crafted script, enabling them to gain unauthorized access to sensitive data stored in the system. Successful exploitation could result in significant information disclosure, potentially leading to serious security consequences. Organizations using the affected version of 32ns KLive are strongly advised to update as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.