GitHub Advisoryadvisory · Go

GHSA-54q4-74p3-mgcw rttys SQL Injection vulnerability

HIGH Published 2023-02-16 Modified 2025-04-01 Official page ↗

Aliases: CVE-2022-38867
Ecosystem: Go
Packages: github.com/zhaojh329/rttys
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-89
Reviewed: 2023-02-23

Affected packages

• Go github.com/zhaojh329/rttys: >= 4.0.0, <= 4.0.2 (no fix yet)

Description

SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, and 4.0.2 in api.go, allows attackers to execute arbitrary code.

Related

Alias · CVE (1)

CVE-2022-38867 SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbitrary code. vulnerability

Weakness · CWE (1)

CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References