PT-2026-1689 · Bluelabsio · Records-Mover

CVE-2023-7333 · Published 2026-01-07 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions bluelabsio records-mover versions up to 1.5.4

Description A weakness exists in bluelabsio records-mover. The issue is related to a SQL injection affecting the Table Object Handler component through an unknown function. Exploitation requires local access.

Recommendations Upgrade to version 1.6.0 to resolve this issue.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2023-7333

GHSA-P3JP-7GJ7-H6PR

PYSEC-2026-1864

Affected Products

Records-Mover

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/7xxx/CVE-2023-7333.json · Exploit
• https://github.com/bluelabsio/records-mover/releases/tag/v1.6.0 · Patch
• https://github.com/bluelabsio/records-mover/commit/3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa · Patch
• https://osv.dev/vulnerability/GHSA-p3jp-7gj7-h6pr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7333 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-1864 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-7333 · Vendor Advisory
• https://github.com/bluelabsio/records-mover · Note
• https://github.com/bluelabsio/records-mover/pull/254 · Note
• https://vuldb.com/?id.339566 · Note
• https://t.me/CVEtracker/41653 · Telegram Post
• https://pypi.org/project/records-mover · Note
• https://vuldb.com/?ctiid.339566 · Note
• https://twitter.com/CVEnew/status/2009150006209728576 · Twitter Post
• https://t.me/cveNotify/148006 · Telegram Post