CVE-2023-27113

CVE-2023-27113 is a SQL injection vulnerability (CWE-89) affecting pearProjectApi version 2.8.10. The issue arises via the organizationCode parameter in the project.php component, enabling malicious SQL payloads to be injected and executed. Published on 2025-01-21, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its potential for widespread impact.

Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low attack complexity. Successful exploitation allows arbitrary SQL query execution, granting high-impact access to confidential data, modification of database contents, and disruption of service availability.

Mitigation details are available in the GitHub issue at https://github.com/a54552239/pearProjectApi/issues/31, which serves as the primary advisory reference for this CVE.