CVE-2022-39056

Publication date

2022-10-18 05:40:20

Family

twcert

State

PUBLISHED

Description

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database.