CVE-2023-3522

CRÍTICO 9.8CVE-2023-3522 · Published 08/08/2023 · updated 17/06/2026

En resumen

CVE-2023-3522 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a license portal system (a2technology).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.62%, mayor que el 50.0% de las vulnerabilidades.
Solución: actualizar a 1.48 o posterior.

Package	Affected versions	Patched versions
license portal system a2technology	`< 1.48`	`1.48`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 License Portal System allows SQL Injection. This issue affects License Portal System: before 1.48.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0445
usom.gov.tr/bildirim/tr-23-0445 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free