{"id":21524,"date":"2025-04-11T12:52:51","date_gmt":"2025-04-11T12:52:51","guid":{"rendered":""},"modified":"2025-04-24T00:37:57","modified_gmt":"2025-04-24T00:37:57","slug":"cve-2023-47460-sql-injection-vulnerability-in-knovos-discovery-v-22-67-0","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-47460-sql-injection-vulnerability-in-knovos-discovery-v-22-67-0\/","title":{"rendered":"CVE-2023-47460: SQL Injection Vulnerability in Knovos Discovery v.22.67.0<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A high severity vulnerability has been identified in Knovos Discovery v.22.67.0, a widely used enterprise software solution. Designated as CVE-2023-47460, this security flaw allows a remote attacker to execute arbitrary code via an SQL injection attack. This type of vulnerability is particularly concerning due to the potential for system<\/a> compromise or data leakage, which can lead to significant organizational disruption, financial burden, and reputational damage.
\nThe vulnerability is relevant to all organizations utilizing the affected version of Knovos Discovery, and its criticality is underscored by a CVSS severity<\/a> score of 8.8. The potential for remote code execution<\/a> places a significant amount of power in the hands of potential attackers, making immediate mitigation actions paramount.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-47460
\nSeverity: High, CVSS score 8.8
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise, potential data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n