CVE-2022-48601

Publication date

2023-08-09 18:32:30

Family

Securifera

State

PUBLISHED

Description

A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.