Lucene search

K

MitreCVELIST:CVE-2022-38488

HistoryDec 14, 2022 - 12:00 a.m.

CVE-2022-38488

2022-12-1400:00:00

mitre

www.cve.org

5

sql injection

logrocket-oauth2-example

/auth/register

username parameter

AI Score

10

Confidence

High

EPSS

0.003

Percentile

68.4%

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.

References

archive.ph/PecmD

archive.ph/VlGDa

blog.logrocket.com/implement-oauth-2-0-node-js/

github.com/diogosouza/logrocket-oauth2-example

github.com/secoats/cve/tree/master/CVE-2022-38488_sqli_logrocket-oauth2-example

AI Score

10

Confidence

High

EPSS

0.003

Percentile

68.4%

Related for CVELIST:CVE-2022-38488

cve1 prion1 nvd1