Lucene search
K

4 matches found

NVD
NVD
added 2023/04/19 12:15 a.m.9 views

CVE-2023-30553

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the sqlapi/apiworkflow.py endpoint ExecuteCheck. User input...

6.5CVSS6.8AI score0.01358EPSS
Exploits1References1
NVD
NVD
added 2023/04/19 12:15 a.m.14 views

CVE-2023-30554

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the sqlapi/apiworkflow.py endpoint ExecuteCheck which passes unfiltered...

6.5CVSS6.9AI score0.01358EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/04/18 10:35 p.m.12 views

CVE-2023-30553 Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the sqlapi/apiworkflow.py endpoint ExecuteCheck. User input...

6.5CVSS7AI score0.01358EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.2 views

PT-2023-22781 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery affected versions not specified Description: The Archery project contains multiple SQL injection issues that may allow an attacker to query connected databases. The sql api/api workflow.py endpoint ExecuteCheck passes unfiltered input...

6.5CVSS6.7AI score0.01358EPSS
Exploits1References4
Rows per page
Query Builder