PT-2022-26707 · Opencats · Opencats

CVE-2022-43023

Published

2022-10-19

Updated

2022-10-20

CVSS v3.1

6.5

Medium

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.6

Description A SQL injection issue was found in the Import viewerrors function via the importID parameter.

Recommendations For OpenCATS version 0.9.6, avoid using the importID parameter in the Import viewerrors function until the issue is resolved.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2022-43023

Opencats