PT-2026-1689 · Bluelabsio · Records-Mover

Published 2026-01-07 · Updated 2026-01-08 · CVE-2023-7333

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions bluelabsio records-mover versions up to 1.5.4

Description A weakness exists in bluelabsio records-mover. The issue is related to a SQL injection affecting the Table Object Handler component through an unknown function. Exploitation requires local access.

Recommendations Upgrade to version 1.6.0 to resolve this issue.

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2023-7333

GHSA-P3JP-7GJ7-H6PR

Affected Products

Records-Mover

References · 12

• https://github.com/bluelabsio/records-mover/releases/tag/v1.6.0 · Patch
• https://github.com/bluelabsio/records-mover/commit/3f8383aa89f45d861ca081e3e9fd2cc9d0b5dfaa · Patch
• https://osv.dev/vulnerability/GHSA-p3jp-7gj7-h6pr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7333 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7333 · Vendor Advisory
• https://github.com/bluelabsio/records-mover/pull/254 · Note
• https://github.com/bluelabsio/records-mover · Note
• https://t.me/cveNotify/148006 · Telegram Post
• https://vuldb.com/?id.339566 · Note
• https://vuldb.com/?ctiid.339566 · Note
• https://t.me/CVEtracker/41653 · Telegram Post
• https://twitter.com/CVEnew/status/2009150006209728576 · Twitter Post