S4E just found a high-severity finding from top 10 tcp port service scan

CVE

CVE-2023-30625

8.8

CVSShigh

Exploitable remotely over the internet · low-privilege account sufficient.

Description

rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution (RCE) due to the `rudder` role in PostgresSQL having superuser permissions by default. Version 1.3.0-rc.1 contains patches for this issue.

Attack Vector

Network

Privileges Req.

Low

User Interaction

None

rudder-server

Updated Sep 28, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2023-30625 Scanner

Detects 'SQL Injection (SQLi)' vulnerability in RudderStack affects v. prior to 1.3.0-rc.1.

Used 3.3k times · 4.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: rudder-server

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →