Описание
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input.
The API is not enabled by default, and a valid API token is required to perform the attack.
EPSS
Процентиль: 29%
0.00105
Низкий
8.8 High
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 8.8
github
3 месяца назад
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required to perform the attack.
EPSS
Процентиль: 29%
0.00105
Низкий
8.8 High
CVSS3
Дефекты
CWE-20