CVE-2023-33366 A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.
HighCVSS 8.8
EPSS 0.60%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| supremainc BioStar 2 | < 2.9.1 | 2.9.1 |
References
- kb.supremainc.com release-notes
- claroty.com third-party-advisory