Official Security Advisory – CVE-2023-47253
Publication Date: August 11, 2023
CVE ID: CVE-2023-47253
Affected Product(s): Qualitor / Version 8.20
At Qualitor Software, we are committed to the security and integrity of our products. We aim to maintain transparency and provide ongoing support to our users. A security vulnerability has recently been identified in our software, referenced under CVE-2023-47253.
Vulnerability Description
The vulnerability was identified in the following file:
/html/ad/adpesquisasql/request/processVariavel.php
It could allow a remote attacker, even without authentication, to execute arbitrary commands on the affected server by exploiting a Remote Code Execution (RCE) flaw through the gridValoresPopHidden parameter.
Resolution
Upon identification, our security team promptly developed and tested an effective fix to mitigate the risk.
The fix is available in the following version:
• 8.20 changeset (f5385a42c) – Released on August, 2023
Users can request the update procedure through our official communication channels.
We strongly recommend that all users who have not yet applied this update do so as soon as possible to ensure continued system security.
Actions Taken
• Analysis and Mitigation: The vulnerability was investigated, and a corrective patch was implemented to eliminate the associated risk.
• Quality Assurance: Rigorous testing was conducted to ensure that the fix did not impact product stability or performance.
• Proactive Communication: Clients were informed of the update and advised to apply it immediately.
User Guidance
1. Verify your current product version and ensure you are running the following version or a later patch:
o 8.20 changeset (f5385a42c) – Released on August, 2023
2. Apply the update according to the instructions provided via our official support channels.
3. If you have any questions or need assistance, please contact our support team through our official communication channels.
Security Commitment
At Qualitor Software, we take product security very seriously. We are continuously working to identify, resolve, and prevent vulnerabilities to ensure a safe environment for our users.
We will continue to monitor and enhance our solutions to maintain customer trust and the integrity of systems using our products.
Contact
For questions or additional information, please contact our technical support team:
? Email: suporte@qualitor.com.br
? Support Portal: https://qualitor.qualitorsoftware.com/qualitor/LoginUsuario.php