CVE-2023-35064

SQLi in Satos Mobile

CVSS 9.8 CRITICALEPSS 0.7%CWE-89

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Jun 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Satos · Satos Mobile

References

https://https://www.usom.gov.tr/bildirim/tr-23-0346 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0346 https://www.usom.gov.tr/bildirim/tr-23-0346