VYPR
← All advisories
High severity8.8NVD Advisory· Published May 23, 2023· Updated Jun 17, 2026

CVE-2023-28394

CVE-2023-28394

Description

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed. As a result, an arbitrary OS command may be executed as well.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Beekeeper Studio, Inc./Beekeeper Studiov5
    Range: versions prior to 3.9.9
  • Beekeeper Studio/Beekeeper Studiollm-fuzzy2 versions
    <3.9.9+ 1 more
    • (no CPE)range: <3.9.9
    • cpe:2.3:a:beekeeperstudio:beekeeper-studio:*:*:*:*:*:*:*:*range: <3.9.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.