CVE-2022-48011: SQL Injection
Published Jan 27, 2023
·Updated
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.
Affected Software
1 affected component
OpenCATS OpenCATS=0.9.7
Event History
Jan 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for Opencats v0.9.7?
The vulnerability ID for Opencats v0.9.7 is CVE-2022-48011.
2
What is the severity rating of CVE-2022-48011?
The severity rating of CVE-2022-48011 is critical, with a rating of 9.8.
3
How does the SQL injection vulnerability in Opencats v0.9.7 work?
The SQL injection vulnerability in Opencats v0.9.7 occurs when an attacker can manipulate the importID parameter in the Import viewerrors function to inject malicious SQL code into the application's database queries.
4
Is Opencats v0.9.7 the only affected version?
Yes, Opencats v0.9.7 is the only affected version.
5
How can I fix the SQL injection vulnerability in Opencats v0.9.7?
To fix the SQL injection vulnerability in Opencats v0.9.7, it is recommended to update the application to a patched version provided by the vendor.