CVE-2022-3799

HIGH8.8EPSS 0.33%

IBAX go-ibax vulnerable to SQL injection

Published: 11/1/2022Modified: 6/5/2024

Also known as:GHSA-fcgf-j8cf-h2rmGO-2024-2759

Description

A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212635.

Affected packages (2)

Go/github.com/IBAX-io/go-ibaxfrom 0, < 1.4.2
Go/github.com/IBAX-io/go-ibaxfrom 0, < 1.4.2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (6)

ADVISORYhttps://github.com/advisories/GHSA-fcgf-j8cf-h2rm
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-3799
PATCHhttps://github.com/IBAX-io/go-ibax
WEBhttps://github.com/IBAX-io/go-ibax/commit/b0183d8e550836dc50282ee74ff421ee41b25a37
WEBhttps://github.com/IBAX-io/go-ibax/issues/2060
WEBhttps://vuldb.com/?id.212635