Sql injection

2023-12-2907:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

documize

remote attackers

arbitrary code

nvd

9.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.1%

JSON

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.

CPENameOperatorVersion
documizeeq5.4.2

CPE	Name	Operator	Version
	documize	eq	5.4.2

References

herolab.usd.de/en/security-advisories/usd-2022-0066/