Lucene search

K
f5F5F5:K82896488
HistoryMay 18, 2022 - 12:00 a.m.

K82896488 : Cyrus SASL vulnerability CVE-2022-24407

2022-05-1800:00:00
my.f5.com
44

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

Security Advisory Description

In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. (CVE-2022-24407)

Impact

Failure to properly escape SQL input allows an attacker to run arbitrary SQL commands.