CVE-2022-30411

Name of the Vulnerable Software and Affected Versions Covid-19 Travel Pass Management System version 1.0

Description The Covid-19 Travel Pass Management System is affected by a SQL Injection issue. This issue can be exploited via the /ctpms/admin/?page=individuals/view individual&id= API endpoint, specifically through the id variable.

Recommendations For Covid-19 Travel Pass Management System version 1.0, as a temporary workaround, consider restricting access to the /ctpms/admin/?page=individuals/view individual&id= endpoint until a patch is available. Avoid using the id variable in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.