CVE-2023-4740

CVE-2023-4740 is a critical SQL injection vulnerability affecting IBOS OA version 4.5.5, specifically within the Delete Draft Handler component. This flaw allows an authenticated attacker to remotely execute arbitrary SQL commands, potentially leading to full compromise of confidentiality, integrity, and availability. With a CVSS score of 8.8 (High), the attack requires low privileges but is simple to execute over the network. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation, and no readily available exploit modules or significant community discussion have been observed.