Skip to content
OpenAdvisories
High · 8.8 CVE-2023-28394 EUVD-2023-32090GHSA-wcc7-8mhx-xfg9

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of …

Published May 23, 2023 · Updated Jan 17, 2025 · Assigned by jpcert

Description

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well.

Affected products

VendorProductAffectedFixed
Beekeeper Studio Beekeeper Studio versions prior to 3.9.9 —

References