CyberSecBulletin

Lovasoa vulnerabilities

We track 1 vulnerability in Lovasoa products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2023.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest Lovasoa vulnerabilities

  • 9.1 Critical severity

    SQLpage: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2023-42454Lovasoa

    SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly, with a database connection string specified in the `sqlpage/sqlpage.json` configuration file (not in an environment variable), wit