CVE-2023-38825

MEDIUM 6.5CVE-2023-38825 · Published 21/03/2024 · updated 17/06/2026

In short

CVE-2023-38825 is a MEDIUM (CVSS 6.5) vulnerability affecting redcap (vanderbilt).
Chance of exploitation in the next 30 days (EPSS): 0.95%, higher than 61.3% of all vulnerabilities.
Fix: update to 13.8.0 or later.

Package	Affected versions	Patched versions
redcap vanderbilt	`< 13.8.0`	`13.8.0`

Description

SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php.

References

ntrampham/REDCap · Exploit
project-redcap.org · Product

More vulnerabilities in redcap

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

redcap

vanderbilt

< 13.8.0

13.8.0

More vulnerabilities in redcap

See all →