Paper/Archive/CVE-2022-1883

CVE-2022-1883

camptocamp camptocamp/terraboard — SQL Injection in camptocamp/terraboard

EPSS 7%CVSS 9.6

critical.is priorityof 100

48

CVSS 9.6 (CNA)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 94.0.940 × 2018.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.

Affected

ProductAffectedFixed inSource

camptocamp/terraboardunspecified – < 2.2.02.2.0CNA

Scores by source

@huntrdev (CNA)9.6CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

References

refhuntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7 refgithub.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc