Beveiligingsadvies

CVE-2022-41892

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-11 00:00:00

Laatst bijgewerkt 2025-04-23 16:38:04

Toegewezen door GitHub_M

CVSS-score 8.6

Status PUBLISHED

Beschrijving

Arches is a web platform for creating, managing, & visualizing geospatial data. Versions prior to 6.1.2, 6.2.1, and 7.1.2 are vulnerable to SQL Injection. With a carefully crafted web request, it's possible to execute certain unwanted sql statements against the database. This issue is fixed in version 7.12, 6.2.1, and 6.1.2. Users are recommended to upgrade as soon as possible. There are no workarounds.

← Alle CVE's bekijken Bekijk op cve.org ↗