CVE-2023-34418
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
Published: 2023-06-26 · CVSS: 8.1 · CVSS 3.1
A valid, authenticated LXCA user may be able to gain unauthorized access to events and other data stored in LXCA due to a SQL injection vulnerability in a specific web API.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7