CVE-2022-1531

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/rtx

Summary

Original description

The description as published by the source.

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web huntr.dev

Metadata

CVE: CVE-2022-1531
Published: 2022-04-29
First seen on SecPulse: 4 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-89

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago