What is CVE-2023-26020?

CVE-2023-26020 is a medium-severity vulnerability in Apple Macos, classified under SQL Injection. CVSS score: 5.7/10. Published 2023-02-17.

How severe is CVE-2023-26020?

Medium severity. CVSS v3 base score is 5.7 out of 10.

SQL Injection in Apple Macos

CVE-2023-26020

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit allows SQL Injection.This issue affects CrafterCMS v4.0 from 4.0.0 through 4.0…

Vulnerability class: SQL Injection

EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H.

Affected products

Apple Macos
Craftercms Crafter_cms
Craftercms — versions 4.0.0, 3.1.0
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@craftersoftware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-26020?: CVE-2023-26020 is a medium-severity vulnerability in Apple Macos, classified under SQL Injection. CVSS score: 5.7/10. Published 2023-02-17.
How severe is CVE-2023-26020?: Medium severity. CVSS v3 base score is 5.7 out of 10.