Lucene search
HistoryJan 27, 2024 - 12:15 a.m.
CVE-2024-22283
cve-2024-22283
improper neutralization
sql injection
delhivery logistics courier
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
19.3%
Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Delhivery Delhivery Logistics Courier.This issue affects Delhivery Logistics Courier: from n/a through 1.0.107.
Affected configurations
Node
delhiverylogistics_courierRange≤1.0.107wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| delhivery | logistics_courier | * | cpe:2.3:a:delhivery:logistics_courier:*:*:*:*:*:wordpress:*:* |
Related
wpvulndb
wpvulndb
prion
prion
Sql injection
2024-01-27 00:15:00
cvelist
cvelist
cve
cve
CVE-2024-22283
2024-01-27 00:15:24
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
19.3%
Related for NVD:CVE-2024-22283