PT-2023-13616 · Easyvista · Easyvista
CVE-2022-38492
·
Publicado
2023-01-10
·
Atualizado
2025-04-09
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
EasyVista versions 2020.2.125.3 through 2022.1.109.0.03
Description
An issue was discovered that allows SQL injection through one parameter.
Recommendations
For versions 2020.2.125.3 through 2022.1.109.0.03, update to version 2022.1.110.1.02 to fix the vulnerability.
As a temporary workaround, consider restricting access to parameters that may allow SQL injection until a patch is available.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Easyvista