exploitDog

GHSA-pcqx-8h4p-6r69

Опубликовано: 18 апр. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.

Ссылки

EPSS

Процентиль: 87%

0.03495

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-200

CWE-89

Связанные уязвимости

CVE-2024-30922

CVSS3: 9.8

nvd

почти 2 года назад

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering.

EPSS

Процентиль: 87%

0.03495

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-200

CWE-89