PT-2025-54456 · Unknown · Pkrystian Full-Stack-Bank

Published 2025-12-31 · Updated 2026-01-02 · CVE-2023-7331

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PKrystian Full-Stack-Bank versions prior to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317

Description A flaw exists in the User Handler component of PKrystian Full-Stack-Bank. Manipulation of unknown code within this component can lead to SQL injection. This issue is remotely exploitable. The software utilizes a rolling release model, meaning specific version details for affected and updated releases are unavailable.

Recommendations Install patch 25c9965a872c704f3a9475488dc5d3196902199a to address this issue.

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2023-7331

Affected Products

Pkrystian Full-Stack-Bank

References · 11

• https://github.com/PKrystian/Full-Stack-Bank/commit/25c9965a872c704f3a9475488dc5d3196902199a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-7331 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7331 · Vendor Advisory
• https://github.com/PKrystian/Full-Stack-Bank/pull/21 · Note
• https://t.me/cveNotify/147553 · Telegram Post
• https://vuldb.com/?ctiid.338650 · Note
• https://t.me/CVEtracker/41126 · Telegram Post
• https://t.me/cveNotify/147408 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2006555825842573441 · Twitter Post
• https://vuldb.com/?id.338650 · Note
• https://twitter.com/CVEnew/status/2006495360986804504 · Twitter Post