CVE-2023-42454

CVE-2023-42454 is a critical vulnerability affecting SQLpage versions prior to 0.11.1, where specific misconfigurations can lead to the exposure of database connection strings. An attacker can retrieve this sensitive information and potentially gain direct access to the database. The vulnerability has a CVSS score of 9.1 (CRITICAL) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, with no user interaction required. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.