CVE-2022-48595

A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48595

creationtimestamp| type| source ---|---|--- 2023-08-09 22:15:22+00:00| seen| https://t.me/cibsecurity/68119...

CVE-2022-48595

ScienceLogic SL1 is affected by a SQL injection in the ticket template watchers feature. The vulnerability arises from unsanitized user-controlled input being passed directly to SQL queries, enabling injection of arbitrary SQL against the backend database. Known details indicate affected software...