CVE-2022-38540

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the createkillsession interface...

Sql injection

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the createkillsession interface...

CVE-2022-38540

The vulnerability CVE-2022-38540 affects Archery versions 1.4.0 through 1.8.5 and arises from a SQL injection in the ThreadIDs parameter of the create_kill_session interface. The issue is documented across multiple feeds (NVD/OSV/Red Hat and third-party trackers) with a high impact potential; exp...