PT-2022-18441
CVE-2022-27472
·
تاريخ النشر
2022-04-12
·
تاريخ التحديث
2022-04-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Roothub version 2.6.0
Description
The issue allows unauthorized attackers to execute arbitrary SQL commands remotely via the
s parameter in the Topics Counting feature. This enables attackers to potentially access or manipulate sensitive data.Recommendations
For Roothub version 2.6.0, consider restricting access to the Topics Counting feature until a patch is available. As a temporary workaround, avoid using the
s parameter in the affected feature to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾