CVE-2022-1531

The CVE-2022-1531 entry corresponds to a SQL injection in ARAX-UI Synonym Lookup in the rtxteam/rtx repo, prior to checkpoint_2022-04-20. Root cause: vulnerability in the ARAX-UI synonym lookup function enabling arbitrary SQL execution. Impact (as stated): remote code execution and possible full ...

CVE-2022-1806

CVE-2022-1806 describes a reflected Cross-site Scripting (XSS) vulnerability in RTX (rtxteam/rtx) prior to checkpoint_2022-05-18. The public records indicate the root cause is input reflection leading to script execution, with PoCs showing exploitation via a callback parameter in the /rtxcomplete...