Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w4c8-366v-m398

Опубликовано: 03 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

EPSS

Процентиль: 76%
0.00988
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

aEnrich a+HRD has insufficient user input validation for specific API parameter. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

EPSS

Процентиль: 76%
0.00988
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89