GitHub Advisoryadvisory · Go

GHSA-fcgf-j8cf-h2rm IBAX go-ibax vulnerable to SQL injection

HIGH Published 2022-11-01 Modified 2024-04-24 Official page ↗
Aliases
CVE-2022-3799
Ecosystem
Go
Packages
github.com/IBAX-io/go-ibax
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-89
Reviewed
2024-04-24

Affected packages

• Go github.com/IBAX-io/go-ibax: < 1.4.2 → fixed in 1.4.2

Description

A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212635.

Related

Alias · CVE (1)

  • CVE-2022-3799 A vulnerability classified as critical was found in IBAX go-ibax. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References