PT-2022-11680 · Unknown · Dns-Stats Hedgehog

Japroc · Published 2022-12-25 · Updated 2024-08-03 · CVE-2021-4276

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions dns-stats hedgehog (affected versions not specified)

Description A vulnerability was found in dns-stats hedgehog, which has been rated as problematic. The issue affects the function DSCIOManager::dsc import input from source of the file src/DSCIOManager.cpp, leading to sql injection. The attack may be launched remotely. However, the real existence of this vulnerability is still doubted at the moment. It is noted that this vulnerability only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-4276

Affected Products

Dns-Stats Hedgehog

References · 7

• https://github.com/dns-stats/hedgehog/commit/58922c345d3d1fe89bb2020111873a3e07ca93ac · Patch
• https://github.com/dns-stats/hedgehog/pull/190 · Patch
• https://osv.dev/vulnerability/CVE-2021-4276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-4276 · Security Note
• https://vuldb.com/?id.216746 · Note
• https://t.me/cvenotify/40643 · Telegram Post
• https://t.me/cvenotify/88820 · Telegram Post