CVE-2022-21234 in Lansweeperinformazioni

Riassunto

di MITRE • 15/04/2022

An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Talos

Prenotare

10/01/2022

Divulgazione

15/04/2022

Moderazione

accettato

CPE

pronto

EPSS

0.72601

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-21234
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-21234
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-21234/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!