CVE-2022-4399
Summary
| CVE | CVE-2022-4399 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-12-10 22:15:00 UTC |
|---|
| Updated | 2023-11-07 03:57:00 UTC |
|---|
| Description | A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Nodau Project |
Nodau |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Use parametetrized SQL statement · TicklishHoneyBee/nodau@7a7d737 · GitHub |
MISC |
github.com |
|
| CVE-2022-4399 | TicklishHoneyBee nodau db.c sql injection |
MISC |
vuldb.com |
|
| Use parametetrized SQL statement to allow special chars by mromerdagan · Pull Request #26 · TicklishHoneyBee/nodau · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 184707 Debian Security Update for nodau (CVE-2022-4399)
