CVE-2022-3801

medium · 6.3

A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability.

6.3

CVSS

30.1%

EPSS (exploit prob.)

98th

EPSS percentile

2022-11-01

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-707CWE-89

Affected products

Vendor	Product	Affected versions
ibax	go-ibax	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/IBAX-io/go-ibax/issues/2062
https://vuldb.com/?id.212637
https://github.com/IBAX-io/go-ibax/issues/2062
https://vuldb.com/?id.212637

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-3801