{"id":"CVE-2023-45684","details":"Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.","modified":"2026-08-12T03:51:08.672797084Z","published":"2023-11-14T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45684.json","unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"fixed":"3.21.3"}]}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45684.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45684"},{"type":"ARTICLE","url":"https://cfengine.com/blog/2023/cve-2023-45684/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cfengine/core","events":[{"introduced":"0"},{"fixed":"1c36dbed663431374d9d8839734e71350c5b7a5d"},{"introduced":"945aee7d4538e71a990dbb42ce99bf3f74e17b40"},{"fixed":"1abf143c87218c2a554252bad7fc5d0c62d253ab"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.18.6"},{"introduced":"3.19.0"},{"fixed":"3.21.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:northern.tech:cfengine:*:*:*:*:enterprise:*:*:*"}}],"versions":["3.18.6-build2","3.21.3-build2","3.18.6-build1","3.21.3-build1","3.21.2-build4","3.21.2-build3","3.21.2","3.18.5-build5","3.18.5-build4","3.18.5","3.18.5-build3","3.21.2-build2","3.18.5-build2","3.21.2-build1","3.18.5-build1","3.21.1-build1","3.21.1","3.21.0-build11","3.21.0-build10","3.21.0","3.21.0-build9","3.21.0-build8","3.21.0-build7","3.21.0-build6","3.21.0-build5","3.21.0-build4","3.21.0-build3","3.21.0-build2","3.21.0-build1","3.18.3-2-build3","3.18.3-2-build2","3.18.3-2","3.18.4-build2","3.18.4-build1","3.18.4","3.18.3-build6","3.18.3-2-build1","3.18.3","3.18.3-build5","3.18.3-build4","3.18.3-build3","3.18.3-build2","3.18.3-build1","3.20.0-build4","3.20.0-build3","3.20.0-build2","3.20.0-build1","3.20.0-2-build1","3.20.0-2","3.20.0","3.18.2-build5","3.18.2-build4","3.18.2-build3","3.18.2","3.18.2-build2","3.18.2-build1","3.19.0-build2","3.19.0","3.18.1-build5","3.18.1","3.18.1-build4","3.18.1-build3","3.18.1-build2","3.18.1-build1","3.18.0-build3","3.18.0-2-build2","3.18.0-2-build1","3.18.0-2","3.18.0-1-build3","3.18.0-1-build2","3.18.0-1-build1","3.18.0","3.18.0-build2","3.18.0-build1","3.17.0-build1","3.17.0","3.16.0-build1","3.16.0","3.15.0-build2","3.15.0-build1","3.15.0b1-build4","3.15.0b1","3.15.0b1-build3","3.15.0b1-build2","3.15.0b1-build1","3.14.0-build4","3.14.0-2-build1","3.14.0-2","3.14.0","3.14.0-build3","3.14.0-build2","3.14.0-build1","3.13.0-build2","3.13.0","3.13.0-build1","3.12.0b1-build2","3.12.0b1","3.12.0b1-build1","3.12.0a1-build1","3.10.0b1-build1","3.8.0b1-build2","3.8.0b1-build1","3.6.x-branchpoint","3.6rc-build2","3.6rc","3.6.0eb2-build2","3.6.0eb2-build1","3.6.0eb1-build2","3.6.0eb1-build1","3.6.0b2-build5","3.6.0b2","3.6.0b2-build4","3.6.0b2-build3","3.6.0b2-build1","3.6.0b1-build4","3.6.0b1","3.6.0b1-build3","3.6.0b1-build2","3.6.0b1-build1","v3.6.0a0","3.5.x-branchpoint","3.5.0b1","3.5.0a2","3.5.0a1","3.4.x-branchpoint","3.4.0a1","3.3.x-branchpoint","svn-migration-point"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-45684.json"}}],"schema_version":"1.9.0"}