← Database

CVE-2023-23634

CRITICAL CVSS: 9.8 Published: 2023-12-29 Modified: 2026-06-17

Description

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.

Affected Platforms

Documize Documize

Weakness Type

CWE-89

References