CVE-2022-1531

Опубликовано: 29 апр. 2022

Источник: nvd

CVSS3: 10

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.

Ссылки

https://github.com/rtxteam/rtx/commit/fa2797e656e3dba18f990a2db1f0f029d41f1921
Patch
Third Party Advisory
https://huntr.dev/bounties/fc4eb544-ef1e-412d-9fdb-0ceb04e038fe
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/rtxteam/rtx/commit/fa2797e656e3dba18f990a2db1f0f029d41f1921
Patch
Third Party Advisory
https://huntr.dev/bounties/fc4eb544-ef1e-412d-9fdb-0ceb04e038fe
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rtx_project:rtx:*:*:*:*:*:*:*:*

Версия до 2022-04-20 (исключая)

EPSS

Процентиль: 88%

0.03816

Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-p4qf-98m6-vm84

CVSS3: 9.8

github

почти 4 года назад

EPSS

Процентиль: 88%

0.03816

Низкий

10 Critical

CVSS3

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-89