Lucene search
+L

7 matches found

Cvelist
Cvelist
•added 2022/04/11 8:13 p.m.•48 views

CVE-2022-24827 SQL Injection in elide-datastore-aggregation

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...

8.1CVSS8.6AI score0.01389EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/04/11 8:13 p.m.•8 views

CVE-2022-24827 SQL Injection in elide-datastore-aggregation

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...

8.1CVSS8.3AI score0.01389EPSS
SaveExploits0References3
Mend
Mend
•added 2022/04/11 8:13 p.m.•2 views

CVE-2022-24827

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...

9.2CVSS0.01389EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•5 views

CVE-2022-24827: Improper Neutralization of Special Elements used in an SQL Command

Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns A column that requires a client provided parameter, and a parameterized column of typ...

8.1CVSS7.4AI score0.01389EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/08 10:43 p.m.•72 views

GHSA-8XPJ-9J9G-FC9R SQL Injection in elide-datastore-aggregation

Impact When leveraging the following together: - Elide Aggregation Data Store for Analytic Queries - Parameterized Columns A column that requires a client provided parameter - A parameterized column of type TEXT There is the potential for a hacker to provide a carefully crafted query that would...

8.1CVSS5.9AI score0.01389EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/04/08 10:43 p.m.•62 views

SQL Injection in elide-datastore-aggregation

Impact When leveraging the following together: - Elide Aggregation Data Store for Analytic Queries - Parameterized Columns A column that requires a client provided parameter - A parameterized column of type TEXT There is the potential for a hacker to provide a carefully crafted query that would...

8.1CVSS1.9AI score0.01389EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/08 12:00 a.m.•1 views

PT-2022-16906

Name of the Vulnerable Software and Affected Versions Elide versions prior to 6.1.4 Description The issue arises when using Elide Aggregation Data Store for Analytic Queries, Parameterized Columns, and a parameterized column of type TEXT. This combination allows a hacker to craft a query that...

8.1CVSS5.8AI score0.01389EPSS
SaveExploits0References9
Rows per page
Query Builder