Official Security Advisory – CVE-2023-47253

Publication Date: August 11, 2023

CVE ID: CVE-2023-47253

Affected Product(s): Qualitor / Version 8.20

At Qualitor Software, we are committed to the security and integrity of our products. We aim to maintain transparency and provide ongoing support to our users. A security vulnerability has recently been identified in our software, referenced under CVE-2023-47253.

Vulnerability Description

The vulnerability was identified in the following file:

/html/ad/adpesquisasql/request/processVariavel.php

It could allow a remote attacker, even without authentication, to execute arbitrary commands on the affected server by exploiting a Remote Code Execution (RCE) flaw through the gridValoresPopHidden parameter.

Resolution

Upon identification, our security team promptly developed and tested an effective fix to mitigate the risk.

The fix is available in the following version:

• 8.20 changeset (f5385a42c) – Released on August, 2023

Users can request the update procedure through our official communication channels.

We strongly recommend that all users who have not yet applied this update do so as soon as possible to ensure continued system security.

Actions Taken

• Analysis and Mitigation: The vulnerability was investigated, and a corrective patch was implemented to eliminate the associated risk.

• Quality Assurance: Rigorous testing was conducted to ensure that the fix did not impact product stability or performance.

• Proactive Communication: Clients were informed of the update and advised to apply it immediately.

User Guidance

1. Verify your current product version and ensure you are running the following version or a later patch:

o 8.20 changeset (f5385a42c) – Released on August, 2023

2. Apply the update according to the instructions provided via our official support channels.

3. If you have any questions or need assistance, please contact our support team through our official communication channels.

Security Commitment

At Qualitor Software, we take product security very seriously. We are continuously working to identify, resolve, and prevent vulnerabilities to ensure a safe environment for our users.

We will continue to monitor and enhance our solutions to maintain customer trust and the integrity of systems using our products.

Contact

For questions or additional information, please contact our technical support team:

? Email: suporte@qualitor.com.br

? Support Portal: https://qualitor.qualitorsoftware.com/qualitor/LoginUsuario.php