EXPOSURES › CVE-2023-51927

CVE-2023-51927

CRITICAL

DETAIL

SourceNVD · cve Published2024-01-20 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-51927 ↗

SHAME 35/100

YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

yonyou · vendor yonbip · product

DESCRIPTION

YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript() method.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.