IBAX go-ibax /api/v2/open/rowsInfo where sql injektion

I IBAX go-ibax var en kritisksvag punkt finns. Som påverkar en okänd funktion filen /api/v2/open/rowsInfo. Manipulering av argumenten where en okänd ingång leder till en sårbarhet klass sql injektion svag punkt. Den rådgivande finns tillgänglig för nedladdning på github.com. Denna svaga punkt behandlas som CVE-2022-3802. Attacken på nätet kan. Det finns tekniska detaljer känd. Han deklarerade proof-of-concept. Den exploit kan laddas ner från github.com. En möjlig åtgärd har utfärdats före och inte bara efter offentliggörandet.

Fält01/11/2022 16:5030/11/2022 15:4330/11/2022 15:49
vendorIBAXIBAXIBAX
namego-ibaxgo-ibaxgo-ibax
file/api/v2/open/rowsInfo/api/v2/open/rowsInfo/api/v2/open/rowsInfo
argumentwherewherewhere
cwe89 (sql injektion)89 (sql injektion)89 (sql injektion)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
identifier206320632063
urlhttps://github.com/IBAX-io/go-ibax/issues/2063https://github.com/IBAX-io/go-ibax/issues/2063https://github.com/IBAX-io/go-ibax/issues/2063
availability111
publicity111
urlhttps://github.com/IBAX-io/go-ibax/issues/2063https://github.com/IBAX-io/go-ibax/issues/2063https://github.com/IBAX-io/go-ibax/issues/2063
cveCVE-2022-3802CVE-2022-3802CVE-2022-3802
responsibleVulDBVulDBVulDB
date1667257200 (01/11/2022)1667257200 (01/11/2022)1667257200 (01/11/2022)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_auSSS
cvss2_vuldb_rlNDNDND
cvss3_vuldb_prLLL
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore6.56.56.5
cvss2_vuldb_tempscore5.65.65.6
cvss3_vuldb_basescore6.36.36.3
cvss3_vuldb_tempscore5.75.75.7
cvss3_meta_basescore6.36.37.1
cvss3_meta_tempscore5.75.76.9
price_0day$0-$5k$0-$5k$0-$5k
cve_assigned1667257200 (01/11/2022)1667257200 (01/11/2022)
cve_nvd_summaryA vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manipulation of the argument where leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212638 is the identifier assigned to this vulnerability.A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manipulation of the argument where leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212638 is the identifier assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prL
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aL
cve_cnaVulDB
cvss3_nvd_basescore8.8
cvss3_cna_basescore6.3

Do you know our Splunk app?

Download it now for free!