GitHub Advisoryadvisory · Go
GHSA-cvh4-cjc9-84qm owncast is vulnerable to SQL Injection
CRITICAL
Official page ↗
- Aliases
- CVE-2022-3751
- Ecosystem
- Go
- Packages
- github.com/owncast/owncast
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
- Reviewed
- 2022-12-02
Affected packages
• Go github.com/owncast/owncast: < 0.0.13 → fixed in 0.0.13
Description
SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.
Related
Alias · CVE (1)
- CVE-2022-3751 SQL Injection in GitHub repository owncast/owncast prior to 0.0.13. vulnerability
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-3751 advisory
- https://github.com/owncast/owncast/pull/2257 web
- https://github.com/owncast/owncast/commit/23b6e5868d5501726c27a3fabbecf49000968591 web
- https://github.com/owncast/owncast package
- https://huntr.com/bounties/a04cff99-5d53-45e5-a882-771b0fad62c9 web
- https://pkg.go.dev/vuln/GO-2022-1138 web