CVE-2023-43640

MEDIO 6.5CVE-2023-43640 · Published 22/09/2023 · updated 17/06/2026

In breve

CVE-2023-43640 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda taxonworks (speciesfilegroup).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.55%, superiore al 46.1% delle vulnerabilità.
Correzione: aggiornare a 0.34.0 o successiva.

Package	Affected versions	Patched versions
taxonworks speciesfilegroup	`< 0.34.0`	`0.34.0`

Description

TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue.

References

SpeciesFileGroup/taxonworks commit a98f2dc · Patch
SpeciesFileGroup/taxonworks security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free