Lucene search

GoogleOSV:CVE-2022-41570

HistorySep 27, 2022 - 11:15 p.m.

CVE-2022-41570

2022-09-2723:15:16

Google

osv.dev

eyesofnetwork

sql injection

unauthenticated

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

JSON

An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.

CPENameOperatorVersion
eonwebeq5.3-2
eonwebeq5.0-0
eonwebeq5.3-7
eonwebeq5.3-1
eonwebeq5.1-0
eonwebeq5.3-0
eonwebeq5.3-4
eonwebeq5.3-8
eonwebeq5.3-10
eonwebeq5.3-5

Name	Operator	Version
eonweb	eq	5.3-2
eonweb	eq	5.0-0
eonweb	eq	5.3-7
eonweb	eq	5.3-1
eonweb	eq	5.1-0
eonweb	eq	5.3-0
eonweb	eq	5.3-4
eonweb	eq	5.3-8
eonweb	eq	5.3-10
eonweb	eq	5.3-5

Rows per page:

1-10 of 161

References

github.com/EyesOfNetworkCommunity/eonweb/issues/120

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

JSON

Related for OSV:CVE-2022-41570