CVE-2023-50395 — SQL Injection Remote Code Execution Vulnerability

Description (CNA)

SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This vulnerability requires user authentication to be exploited

Affected (CNA)

Vendor / product	Versions
SolarWinds / SolarWinds Platform	affected 2023.4.2 and previous version

CWE

CWE-89

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-50395
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2024-1_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.