{"id":"CVE-2023-33967","aliases":["GHSA-4c32-w6c7-77x4"],"title":"SQL injection when using MySQL/PostgreSQL data checking","summary":"SQL injection when using MySQL/PostgreSQL data checking","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","vendor":"megaease","product":"github.com/megaease/easeprobe","ecosystem":"go","affected":["github.com/megaease/easeprobe < 2.1.0"],"patched":["github.com/megaease/easeprobe 2.1.0"],"published":"2023-06-06","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:01.907578157Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-4c32-w6c7-77x4","references":[{"url":"https://github.com/megaease/easeprobe/security/advisories/GHSA-4c32-w6c7-77x4"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33967"},{"url":"https://github.com/megaease/easeprobe/pull/330"},{"url":"https://github.com/megaease/easeprobe/commit/caaf5860df2aaa76acd29bc40ec9a578d0b1d6e1"},{"url":"https://github.com/megaease/easeprobe"},{"url":"https://github.com/megaease/easeprobe/releases/tag/v2.1.0"}],"tags":["osv","go"],"epss":0.00657,"epssPercentile":0.49686,"ingestedAt":"2026-09-12T03:13:01.752Z","slug":"CVE-2023-33967","body":"## Overview\n\nAn SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0; users should upgrade to this version.\n\nThe vulnerability was discovered by the [Oxeye research](https://www.oxeye.io/) team.\n\n\n## Affected packages\n\n- `github.com/megaease/easeprobe < 2.1.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `github.com/megaease/easeprobe 2.1.0`","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}