PT-2022-26707 · Opencats · Opencats

Published 2022-10-19 · Updated 2022-10-20 · CVE-2022-43023

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenCATS version 0.9.6

Description A SQL injection issue was found in the Import viewerrors function via the importID parameter.

Recommendations For OpenCATS version 0.9.6, avoid using the importID parameter in the Import viewerrors function until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-43023

Affected Products

Opencats

References · 4

• 🔥❌ https://github.com/hansmach1ne/opencats_zero-days/blob/main/SQLI_imports_errors.md · Exploit, Deleted
• 🔥 https://github.com/hansmach1ne/CVE-portfolio/tree/main/CVE-2022-43023 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43023 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43023 · Vendor Advisory