Vulnerability Description
External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.0.0
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Yugabyte | Yugabytedb | < 2.2.0.0 |
| Apple | Iphone Os | - |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://www.yugabyte.com/Product
- https://www.yugabyte.com/Product
FAQ
What is CVE-2023-0575?
CVE-2023-0575 is a vulnerability with a CVSS score of 7.2 (HIGH). External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execComman...
How severe is CVE-2023-0575?
CVE-2023-0575 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-0575?
Check the references section above for vendor advisories and patch information. Affected products include: Yugabyte Yugabytedb, Apple Iphone Os, Apple Macos, Linux Linux Kernel, Microsoft Windows.