Skip to content

SQL injection vulnerability in Farmbot-Web-App

High
roryaronson published GHSA-pgq5-ff74-g7xq Oct 12, 2023

Package

No package listed

Affected versions

< 15.8.3

Patched versions

15.8.4

Description

Summary

An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table).

Impact

This issue may lead to Information Disclosure.

Severity

High

CVE ID

CVE-2023-45674

Weaknesses

Credits