Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Octogonz

#27561of 56,326
9.8Total CVSS
Vulnerabilities · 1
PT-2022-24424
9.8
2022-12-14
Unknown · Logrocket-Oauth2-Example · CVE-2022-38488
**Name of the Vulnerable Software and Affected Versions** logrocket-oauth2-example versions prior to 2020-05-27 **Description** The issue allows SQL injection via the `/auth/register` API endpoint, specifically through the `username` parameter. **Recommendations** For versions prior to 2020-05-27, as a temporary workaround, consider restricting access to the `/auth/register` API endpoint or sanitizing the `username` parameter to prevent SQL injection until a patch is available.