GitHub Advisoryadvisory · Go
GHSA-76j4-gggq-7rg9 SQLinjection in falcon-plus
CRITICAL
Official page ↗
- Aliases
- CVE-2022-26245
- Ecosystem
- Go
- Packages
- github.com/open-falcon/falcon-plus
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
- Reviewed
- 2022-04-07
Affected packages
• Go github.com/open-falcon/falcon-plus: <= 0.3.0 (no fix yet)
Description
Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.
Related
Alias · CVE (1)
- CVE-2022-26245 Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go. vulnerability
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness