Lucene search
PRIOn knowledge basePRION:CVE-2022-3971HistoryNov 13, 2022 - 10:15 a.m.
Sql injection
2022-11-1310:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
matrix-appservice-irc
critical
sql injection
code manipulation
postgres
patch
upgrading
version 0.36.0
component
vdb-213550 identifier
A vulnerability was found in matrix-appservice-irc up to 0.35.1. It has been declared as critical. This vulnerability affects unknown code of the file src/datastore/postgres/PgDataStore.ts. The manipulation of the argument roomIds leads to sql injection. Upgrading to version 0.36.0 is able to address this issue. The name of the patch is 179313a37f06b298150edba3e2b0e5a73c1415e7. It is recommended to upgrade the affected component. VDB-213550 is the identifier assigned to this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| matrix_irc_bridge | le | 0.36.0 |
Related
cvelist
cvelist
CVE-2022-3971 matrix-appservice-irc PgDataStore.ts sql injection
2022-11-13 00:00:00
nvd
nvd
CVE-2022-3971
2022-11-13 10:15:09
osv
osv
CVE-2022-3971
2022-11-13 10:15:09
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
2022-11-13 12:00:17
veracode
veracode
SQL Injection
2022-11-14 07:37:00
github
github
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
2022-11-13 12:00:17
cve
cve
CVE-2022-3971
2022-11-13 10:15:09