AI Score
Confidence
Low
SSVC
Exploitation
poc
Automatable
yes
Technical Impact
total
Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query.
github.com/andreysanyuk/CVE-2023-42283