Ibos Oa · Ibos Oa · CVE-2023-4852
**Name of the Vulnerable Software and Affected Versions**
IBOS OA version 4.5.5
**Description**
A critical issue affects the processing of the file `?r=dashboard/database/optimize`, leading to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
**Recommendations**
For IBOS OA version 4.5.5, consider disabling access to the `?r=dashboard/database/optimize` file until a patch is available. Restrict remote access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.