Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/05 12:00 a.m.•1 views

CVE-2026-5586: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS5.4AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder