Unauthenticated SQL Injection in Cachet

Impact In Cachet versions through 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and session. Patches The original reposito...

SQL Injection

cachethq/cachet is vulnerable to SQL injection. An unauthenticated attacker is able to inject and execute arbitrary SQL statements to obtain confidential information via SearchableTraitscopeSearch...

CVE-2021-39165

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

CVE-2021-39165

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

Sql injection

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

CVE-2021-39165

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the "SearchableTraitscopeSearch". Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password a...

CVE-2021-39165: Improper Authentication

Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the SearchableTraitscopeSearch. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and...

PT-2021-22422

Name of the Vulnerable Software and Affected Versions Cachet versions prior to 2.5 Description The issue is a SQL injection vulnerability located in the SearchableTraitscopeSearch function. This vulnerability can be exploited by attackers without authentication to exfiltrate sensitive data from t...