CVE-2023-39654

CRITICAL

abupy < 0.4.0 - SQL Injection via abupy.MarketBu.ABuSymbol.search_to_symbol_dict

Title source: llm

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search_to_symbol_dict.

Core 2

Core References

Exploit

Product

CVSS v3 9.8

EPSS 0.0074

EPSS Percentile 50.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-89

Status published

Products (1)

abuquant/abupy < 0.4.0

Published Sep 05, 2023

Tracked Since Feb 18, 2026