CVE-2022-27472

Name of the Vulnerable Software and Affected Versions Roothub version 2.6.0

Description The issue allows unauthorized attackers to execute arbitrary SQL commands remotely via the s parameter in the Topics Counting feature. This enables attackers to potentially access or manipulate sensitive data.

Recommendations For Roothub version 2.6.0, consider restricting access to the Topics Counting feature until a patch is available. As a temporary workaround, avoid using the s parameter in the affected feature to minimize the risk of exploitation.