Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Octogonz

#24216of 53,622
9.8Total CVSS
Vulnerabilities · 1
PT-2022-24424
9.8
2022-12-14
Unknown · Logrocket-Oauth2-Example · CVE-2022-38488
**Name of the Vulnerable Software and Affected Versions** logrocket-oauth2-example versions prior to 2020-05-27 **Description** The issue allows SQL injection via the `/auth/register` API endpoint, specifically through the `username` parameter. **Recommendations** For versions prior to 2020-05-27, as a temporary workaround, consider restricting access to the `/auth/register` API endpoint or sanitizing the `username` parameter to prevent SQL injection until a patch is available.