Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w654-6gvp-6w5j

Опубликовано: 25 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

EPSS

Процентиль: 22%
0.00071
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89