CVE-2022-43020: SQL Injection
Published Oct 19, 2022
·Updated
OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag update function.
Affected Software
1 affected component
OpenCATS OpenCATS=0.9.6
Event History
Oct 19, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability in OpenCATS v0.9.6?
The vulnerability is a SQL injection via the tag_id variable in the Tag update function.
2
What is the severity of CVE-2022-43020?
The severity of CVE-2022-43020 is medium with a CVSS score of 6.5.
3
How does the SQL injection vulnerability occur in OpenCATS v0.9.6?
The SQL injection vulnerability occurs due to improper handling of the tag_id variable in the Tag update function.
4
Is there a fix available for CVE-2022-43020?
Yes, a fix is available for the SQL injection vulnerability in OpenCATS v0.9.6. It is recommended to update to a patched version.
5
What is the CWE classification for CVE-2022-43020?
The CWE classification for CVE-2022-43020 is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).