Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gpfm-qqg7-xjcg

Опубликовано: 28 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

EPSS

Процентиль: 66%
0.00526
Низкий

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 8.8
nvd
больше 3 лет назад

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

EPSS

Процентиль: 66%
0.00526
Низкий

8.8 High

CVSS3

Дефекты

CWE-89