Sql injection

2024-01-1001:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

coderd-repos

eva 1.0.0

critical

http post request handler

sql injection

exploit

public disclosure

vdb-250124

nvd

7.7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.5%

JSON

A vulnerability was found in coderd-repos Eva 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /system/traceLog/page of the component HTTP POST Request Handler. The manipulation of the argument property leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250124.