CVE-2021-37522

CVE-2021-37522 affects Locke-Bot 2.0.2, where SQL injection is possible via crafted strings to the endpoints/files: /src/db.js, /commands/mute.js, and /modules/event/messageDelete.js. The vulnerability is described as allowing remote attackers to run arbitrary SQL commands, with CVSS v3.1 metrics...