PT-2017-14537
CVE-2017-16735
·
تاريخ النشر
2017-12-20
·
تاريخ التحديث
2018-01-04
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Ecava IntegraXor versions 6.1.1030.1 and prior
Description
A SQL Injection issue was discovered, which generates an error in the database log. This issue allows for potential information disclosure.
Recommendations
For versions 6.1.1030.1 and prior, consider restricting access to the
getdata API endpoint until a patch is available. As a temporary workaround, avoid using the name parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾