Vulnerability Description
SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-attendance) v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py component.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Camsbiometrics | Zkteco\, Essl\, Cams Biometrics Integration Module | >= 13.0, <= 16.0.1 |
| Odoo | Biometric Attendance | >= 13.0, <= 16.0.1 |
Related Weaknesses (CWE)
References
- https://github.com/luvsn/OdZoo/tree/main/exploits/odoo-biometric-attendanceThird Party Advisory
- https://github.com/luvsn/OdZoo/tree/main/exploits/odoo-biometric-attendanceThird Party Advisory
FAQ
What is CVE-2023-48050?
CVE-2023-48050 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-attendance) v. 13.0 through 16.0.1 allows a remote attacker to ex...
How severe is CVE-2023-48050?
CVE-2023-48050 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-48050?
Check the references section above for vendor advisories and patch information. Affected products include: Camsbiometrics Zkteco\, Essl\, Cams Biometrics Integration Module, Odoo Biometric Attendance.