GHSA-mgqh-3qm7-gx82

ghsaUSosv

IBAX go-ibax vulnerable to SQL injection

view advisory published 2022-11-01Licence: CC-BY-4.0

A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212634 is the identifier assigned to this vulnerability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-3798US	high8.8	0.56% (46th)	—	2022-11-01
A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection.…

references

External citations — patches, advisories, analysis.

https://github.com/IBAX-io/go-ibaxPACKAGE
https://github.com/IBAX-io/go-ibax/commit/b0183d8e550836dc50282ee74ff421ee41b25a37WEB
https://github.com/IBAX-io/go-ibax/issues/2060WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-3798ADVISORY
https://vuldb.com/?id.212634WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan