Lucene search
GoogleOSV:CVE-2022-23857HistoryJan 24, 2022 - 2:15 a.m.
CVE-2022-23857
2022-01-2402:15:06
Google
osv.dev
3
model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table (which contains sensitive information such as the users’ encrypted passwords).
Related
alpinelinux
alpinelinux
CVE-2022-23857
2022-01-24 02:15:06
cve
cve
CVE-2022-23857
2022-01-24 02:15:06
cvelist
cvelist
CVE-2022-23857
2022-01-24 01:56:34
osv
osv
SQL injection in github.com/navidrome/navidrome
2022-01-27 16:23:02
cnvd
cnvd
Navidrome SQL Injection Vulnerability
2022-01-26 00:00:00
prion
prion
Sql injection
2022-01-24 02:15:00
github
github
SQL injection in github.com/navidrome/navidrome
2022-01-27 16:23:02
veracode
veracode
SQL Injection
2022-01-25 05:08:04
nvd
nvd
CVE-2022-23857
2022-01-24 02:15:06