Lucene search

K
cve[email protected]CVE-2022-45041
HistoryDec 19, 2022 - 9:15 p.m.

CVE-2022-45041

2022-12-1921:15:10
CWE-89
web.nvd.nist.gov
25
cve-2022-45041
sql injection
xinhu
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%

SQL Injection exits in xinhu < 2.5.0

Affected configurations

NVD
Node
rockoaxinhuRange<2.5.0
CPENameOperatorVersion
rockoa:xinhurockoa xinhult2.5.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%

Related for CVE-2022-45041