PT-2022-8325 · Unknown · S::Can Moni::Tools

·

CVE-2020-12507

·

Published

2022-11-07

·

Updated

2022-11-17

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions s::can moni::tools versions prior to 4.2
Description The issue allows an authenticated attacker to gain full access to the database through SQL injection, potentially resulting in loss of confidentiality, loss of integrity, and Denial of Service (DoS).
Recommendations For versions prior to 4.2, update to version 4.2 or later to resolve the issue. As a temporary workaround, consider restricting database access to minimize the risk of exploitation.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2020-12507

Affected Products

S::Can Moni::Tools