CVE-2022-48589 in SL1información

Resumen

por MITRE • 2023-08-09

A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Securifera, Inc.

Reservar

2023-08-09

Divulgación

2023-08-09

Moderación

aceptado

Artículo

VDB-236675

CPE

listo

EPSS

0.00608

KEV

no

Actividades

muy bajo

Fuentes

Might our Artificial Intelligence support you?

Check our Alexa App!