CVE-2021-38167

Publication date

2021-08-07 18:00:36

Family

mitre

State

PUBLISHED

Description

Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.