Lucene search
Veracode Vulnerability DatabaseVERACODE:38270HistoryNov 28, 2022 - 5:56 a.m.
SQL Injection
2022-11-2805:56:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
sql injection
org.opendaylight.aaa
aaa-idm-store-h2
deleteuser function
userstore.java
/auth/v1/users/ api
0.001 Low
EPSS
Percentile
26.9%
org.opendaylight.aaa:aaa-idm-store-h2 is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the deleteUser function in UserStore.java allows a malicious user to inject and execute arbitrary SQL queries on the target system, when the /auth/v1/users/ API interface is used.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aaa-idm-store-h2 | le | 0.16.4 | |
| aaa-idm-store-h2 | le | 0.16.4 |
Related
nvd
nvd
CVE-2022-45931
2022-11-27 03:15:11
prion
prion
Sql injection
2022-11-27 03:15:00
cvelist
cvelist
CVE-2022-45931
2022-11-27 00:00:00
cve
cve
CVE-2022-45931
2022-11-27 03:15:11
redhatcve
redhatcve
CVE-2022-45931
2022-11-29 21:56:08