Description
SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update.php.
Critical · 9.8
CVE-2023-38825
EUVD-2023-42598GHSA-v884-7rcp-mpm4
SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password …
Published Mar 6, 2024 · Updated Aug 5, 2024 · Assigned by mitre