CVE-2021-43766

🗓️ 25 Aug 2022 17:27:31Reported by fedoraType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 77 Views

Odyssey server vulnerability allowing SQL injection via man-in-the-middle attack

Reporter	Title	Published	Views	Family All 11
CBLMariner	CVE-2021-43766 affecting package postgresql 12.8-1	13 Oct 202200:40	–	cbl_mariner
CNNVD	Tyler Odyssey 信任管理问题漏洞	25 Aug 202200:00	–	cnnvd
Cvelist	CVE-2021-43766	25 Aug 202217:27	–	cvelist
Tenable Nessus	EulerOS 2.0 SP8 : postgresql-10.5 (EulerOS-SA-2023-1346)	8 Feb 202300:00	–	nessus
EUVD	EUVD-2021-30673	3 Oct 202520:07	–	euvd
Microsoft CVE	Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.	1 Sep 202207:00	–	mscve
NVD	CVE-2021-43766	25 Aug 202218:15	–	nvd
OpenVAS	Huawei EulerOS: Security Advisory for postgresql-10.5 (EulerOS-SA-2023-1346)	9 Feb 202300:00	–	openvas
Prion	Sql injection	25 Aug 202218:15	–	prion
Positive Technologies	PT-2022-11907 · Odyssey · Odyssey	25 Aug 202200:00	–	ptsecurity

NVD

Node

odyssey_project odysseyMatch1.1

[
  {
    "product": "Odyssey",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Odyssey 1.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/yandex/odyssey/issues/376%2C
postgresql	www.postgresql.org/support/security/CVE-2021-23214/

17 Jun 2026 04:11Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.1

EPSS0.00447