CVE-2022-38541

Summary: CVE-2022-38541 affects Archery versions 1.8.3–1.8.5. Multiple SQL injection vulnerabilities are exploitable via the start_time and stop_time parameters in the my2sql interface. The NVD entry lists a critical base score (9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Several connected sources...

CVE-2022-38541

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...