CVE-2023-33364

Description

References

• claroty.com/team82/disclosure-dashboard/cve-2023-33364 · Third Party Advisory
• kb.supremainc.com/knowledge/doku.php · Release Notes

More vulnerabilities in biostar 2

• CVE-2023-33366HIGH 8.8A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives …
• CVE-2023-33365HIGH 7.5A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files fro…
• CVE-2023-33363HIGH 7.5An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functiona…
• CVE-2023-31923HIGH 8.8Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker w…
• CVE-2023-27167MEDIUM 6.5Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.