5 matches found
CVE-2023-42284
Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...
9.8CVSS7.8AI score0.01247EPSS
SaveExploits2References1
CVE-2023-42284
Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...
9.8CVSS9.6AI score0.01247EPSS
SaveExploits2References1
CVE-2023-42284
CVE-2023-42284 concerns Tyk Gateway 5.0.3. The vulnerability is a blind SQL injection in the API parameter api_version , enabling an attacker to access and dump the database via a crafted query. Reported impact is high (database exposure/compromise) with CVSS 3.1 base score 9.8 (CRITICAL) from NV...
9.8CVSS9.6AI score0.01247EPSS
SaveExploits2References1Affected Software1
20