by Kastro
Paper/Archive/CVE-2023-5155

CVE-2023-5155

Utarit Information Technologies SoliPay Mobile App — SQLi in Utarit's Smart Deposit System

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.1.441 × 208.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection. This issue affects SoliPay Mobile App: before 5.0.8.

Affected

ProductAffectedFixed inSource
SoliPay Mobile App< 5.0.85.0.8CNA
solipay_mobile_app< 5.0.85.0.8CISA-ADP

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-0104refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0104