CVE-2023-42284

Aviso Apenas para fins educacionais! Detalhes Prova de conceito para CVE-2023-42284. Tyk Gateway é vulnerável a injeção SQL. Corrigido na versão 5.0.7. O parâmetro de URL ‘apiversion’ de "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..." é vulnerável a injeção SQL cega. Exploraçã...

CVE-2023-42283

Aviso Legal Apenas para fins educacionais! Detalhes Prova de conceito para CVE-2023-42283. Tyk Gateway é vulnerável a injeção SQL. Corrigido na versão 5.0.7. O parâmetro de URL 'apiid' de "https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid=" é vulnerável a injeção SQL cega. Exploraç...

EUVD-2021-10427

Malware in sbrugna...

EUVD-2023-46737

Malicious code in bioql PyPI...

EUVD-2023-46738

Malicious code in bioql PyPI...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

Sql injection

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

Sql injection

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

Tyk Gateway Security Vulnerability

Tyk Gateway is a cloud-based, open-source API gateway open-sourced by Tyk Technologies. A security vulnerability exists in Tyk Gateway version 5.0.3. An attacker exploited the vulnerability to access and dump a database via a specially crafted SQL query...

CVE-2023-42284

Blind SQL injection in apiversion parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42284

CVE-2023-42284 concerns Tyk Gateway 5.0.3. The vulnerability is a blind SQL injection in the API parameter api_version , enabling an attacker to access and dump the database via a crafted query. Reported impact is high (database exposure/compromise) with CVSS 3.1 base score 9.8 (CRITICAL) from NV...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

PT-2023-7225 · Tyk · Tyk Gateway

Name of the Vulnerable Software and Affected Versions: Tyk Gateway version 5.0.3 Description: The issue concerns a blind SQL injection in the api id parameter, allowing an attacker to access and dump the database via a crafted SQL query. This is related to the lack of protection measures for the...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

CVE-2023-42283

Blind SQL injection in apiid parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query...

PT-2023-7385 · Tyk · Tyk Gateway

Name of the Vulnerable Software and Affected Versions: Tyk Gateway version 5.0.3 Description: The issue is related to a lack of protection against SQL query structure exploitation in the Tyk Gateway API implementation. This allows a remote attacker to execute arbitrary SQL queries. Specifically, ...