An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance module of the app. This allows performing queries on the local database.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-02-02T00:00:00
Updated: 2024-08-29T18:53:17.196Z
Reserved: 2023-11-17T00:00:00
Link: CVE-2023-48645
Vulnrichment
Updated: 2024-08-02T21:37:54.447Z
NVD
Status : Modified
Published: 2024-02-02T09:15:37.420
Modified: 2024-11-21T08:32:10.640
Link: CVE-2023-48645
Redhat
No data.