CVE-2023-41262

9.8 criticalEPSS 0.8%

Critical (9.8) in plixer scrutinizer. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV is vulnerable to SQL injection through the sorting parameter, allowing an unauthenticated user to execute arbitrary SQL statements in the context of the application's backend database server.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-10-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

plixer:scrutinizer

References

https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md

Check your stack JSON