CVE-2022-24848

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the "/api/programs/orgUnits?programs=" API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...

PT-2022-16922

Name of the Vulnerable Software and Affected Versions DHIS2 versions prior to 2.36.10.1 and 2.37.6.1 Description DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security issue affects the "/api/programs/orgUnits?programs=" API...

CVE-2022-24848: Improper Neutralization of Special Elements used in an SQL Command

DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the /api/programs/orgUnits?programs= API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from...