Approved changes feed: RSS · Atom

cpe:2.3:a:speciesfilegroup:taxonworks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpeciesfilegroup (5fa7f809-fecc-5fcd-995c-8d7bcfc378cb)
ProductTaxonworks (2777cc1d-00c9-5626-9654-842da58cbbc6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/speciesfilegroup/taxonworks purl2cpe 2026-06-01 10:11:46.494576

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43640 vulnerable 2026-06-08 06:12:37.614555 TaxonWorks SQL injection vulnerability
MEDIUM (6.5)
TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in TaxonWorks that allows authenticated attackers to extract arbitrary data from the TaxonWorks database (including the users table). This issue may lead to information disclosure. Version 0.34.0 contains a fix for the issue.
Published: 2023-09-22T17:11:42.290Z
Updated: 2024-09-24T14:23:46.578Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.