CVE-2023-46954

CRITICAL 9.8CVE-2023-46954 · Published 03/11/2023 · updated 17/06/2026

In short

CVE-2023-46954 is a CRITICAL (CVSS 9.8) vulnerability affecting relativityone (relativity).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.0% of all vulnerabilities.
Fix: update to 12.4.537.3 or later.

Package	Affected versions	Patched versions
relativityone relativity	`= 12.4.537.3< 12.4.537.3`	`12.4.537.3`

Description

SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitrary code via the name parameter.

References

jakedmurphy1/CVE-2023-46954 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free