PatchSiren

Digita Information Technology CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Digita Information Technology CVE published 2023-09-05

CVE-2023-4034

CVE-2023-4034 is a critical SQL injection issue in Smartrise Document Management System affecting versions before Hvl-2.0. The vulnerability is rated CVSS 9.8 and, based on the published vector, can be reached over the network without user interaction or privileges. Organizations running affected versions should treat this as a high-priority remediation item and move to Hvl-2.0 or later.