CVE-2023-31719

9.8

CVSS

Description

FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

Attack Vector

Privileges Req.

User Interaction

Updated Nov 10, 2026View on NVD →

S4E scanner

criticalWeb Vulnerabilities~10 seconds

FUXA <= 1.1.12 - Unauthenticated SQL Injection

FUXA References: https://github.com/MateusTesser/CVE-2023-31719 https://github.com/frangoteam/FUXA/blob/v1.1.12/server/runtime/users/usrstorage.js https://github.com/frangoteam/FUXA/blob/v1.1.12/server/api/auth/index.js https://nvd.nist.gov/vuln/detail/CVE-2023-31719 Remediation: Update to the latest version of FUXA to fix the vulnerability.

Used 18 times · 9 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →