Lucene search

SQL injection in github.com/navidrome/navidrome

🗓️ 27 Jan 2022 16:02:23Reported by GitHub Advisory DatabaseType

Navidrome software SQL injection vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
AlpineLinux	CVE-2022-23857	24 Jan 202202:15	–	alpinelinux
Cvelist	CVE-2022-23857	24 Jan 202201:56	–	cvelist
CVE	CVE-2022-23857	24 Jan 202202:15	–	cve
OSV	GO-2022-0302 SQL injection in github.com/navidrome/navidrome	21 Aug 202414:30	–	osv
OSV	CVE-2022-23857	24 Jan 202202:15	–	osv
OSV	SQL injection in github.com/navidrome/navidrome	27 Jan 202216:23	–	osv
Veracode	SQL Injection	25 Jan 202205:08	–	veracode
NVD	CVE-2022-23857	24 Jan 202202:15	–	nvd
Prion	Sql injection	24 Jan 202202:15	–	prion
CNVD	Navidrome SQL Injection Vulnerability	26 Jan 202200:00	–	cnvd

Vulners

Node

navidrome navidromeRange<0.47.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23857
github	www.github.com/navidrome/navidrome/commit/9e79b5cbf2a48c1e4344df00fea4ed3844ea965d
github	www.github.com/navidrome/navidrome/releases/tag/v0.47.5
github	www.github.com/advisories/GHSA-pmcr-2rhp-36hr

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2022 16:23Current

3.9Low risk

Vulners AI Score3.9

CVSS24

CVSS36.5

EPSS0.00227

CWE-89