SmartAsset-SQLinj-CVE-2020-26525

SmartAsset-SQLinj-CVE-2020-26525 Damstra Smart Asset 2020.7 存在 SQL 注入漏洞，可通过 API/api/Asset 的 originator 参数触发。 Smart Asset - 版本 2020.7 CVE-2020-26525 ========================== HTTP 请求： GET /API/api/Asset?assetCode=XXX-08-X-01-06-01&...

CVE-2020-26525

Damstra Smart Asset 2020.7 is affected by a SQL injection in the API endpoint API/Asset originator parameter. The root cause is an SQL injection vulnerability that can cause the database and server to initiate remote connections to third‑party DNS servers. This CVE (CVE-2020-26525) is documented ...