DevSecOps Toolkit

CVE record

CVE-2023-4034

CRITICALCVSS 9.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0.

Vulnerability metadata

Published
2023-09-05T13:45:48.713Z
Modified
2026-05-21T08:46:42.143Z
EPSS
Not available
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References