SmartAsset-SQLinj-CVE-2020-26525

SmartAsset-SQLinj-CVE-2020-26525 Damstra Smart Asset 2020.7 presenta una SQL injection tramite il parametro originator dell'API /api/Asset. Smart Asset - versione 2020.7 CVE-2020-26525 ========================== Richiesta HTTP: GET /API/api/Asset?assetCode=XXX-08-X-01-06-01&...

CVE-2020-26525

Damstra Smart Asset 2020.7 is affected by a SQL injection in the API endpoint API/Asset originator parameter. The root cause is an SQL injection vulnerability that can cause the database and server to initiate remote connections to third‑party DNS servers. This CVE (CVE-2020-26525) is documented ...