Описание
SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.
Ссылки
- ExploitThird Party Advisory
- Broken Link
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ketr:jepaas:7.2.8:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00177
Низкий
7.5 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
CVSS3: 7.5
github
около 1 года назад
SQL injection vulnerability in JEPAAS7.2.8, via /je/rbac/rbac/loadLoginCount in the dateVal parameter, which could allow a remote user to submit a specially crafted query, allowing an attacker to retrieve all the information stored in the DB.
EPSS
Процентиль: 39%
0.00177
Низкий
7.5 High
CVSS3
Дефекты
CWE-89