Lucene search
Veracode Vulnerability DatabaseVERACODE:36994HistorySep 12, 2022 - 5:58 a.m.
SQL Injection
2022-09-1205:58:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
60.8%
cruddl is vulnerable to sql injection attacks. The vulnerability exists because of the missing sanitizations in the query function in arangodb-adapter.ts which allows a remote attacker to inject and execute malicious javascript script in to the system. .
| CPE | Name | Operator | Version |
|---|---|---|---|
| cruddl | le | 2.7.0-alpha.1 | |
| cruddl | le | 3.0.0 | |
| cruddl | le | 2.7.0-alpha.1 | |
| cruddl | le | 3.0.0 |
Related
github
github
osv
osv
CVE-2022-36084
2022-09-08 22:15:08
prion
prion
Code injection
2022-09-08 22:15:00
cvelist
cvelist
CVE-2022-36084 cruddl vulnerable to AQL injection through flexSearch
2022-09-08 21:15:13
nvd
nvd
CVE-2022-36084
2022-09-08 22:15:08
cve
cve
CVE-2022-36084
2022-09-08 22:15:08