PT-2026-25672 · Wakyma · Wakyma Application Web+1
CVE-2026-3023
·
Publicado
2026-03-16
·
Atualizado
2026-04-19
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Wakyma (affected versions not specified)
Description
A non-relational SQL injection (NoSQLi) issue exists in the Wakyma web application. An authenticated user can modify a POST request sent to the ''vets.wakyma.com/pets/print-tags'' endpoint to inject NoSQL commands. Successful exploitation allows listing of both pets and owner names. The vulnerable endpoint is ''vets.wakyma.com/pets/print-tags''.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Wakyma Application Web
Wakyma