PT-2022-27057 · Unknown+1 · Ticklishhoneybee Nodau+1

Mromerdagan · CVE-2022-4399 · Published 2022-12-10 · Updated 2022-12-13

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions TicklishHoneyBee nodau (affected versions not specified)

Description A critical issue was found in TicklishHoneyBee nodau, affecting some unknown functionality of the file src/db.c. The manipulation of the value/name argument leads to sql injection.

Recommendations Apply a patch to fix this issue. The patch is identified by the name 7a7d737a3929f335b9717ddbd31db91151b69ad2.

Exploit

Fix

Improper Neutralization

SQL injection

Weakness Enumeration

CWE-707

CWE-89

Related Identifiers

CVE-2022-4399

Affected Products

Debian

Ticklishhoneybee Nodau

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4399.json · Exploit
• https://github.com/TicklishHoneyBee/nodau/commit/7a7d737a3929f335b9717ddbd31db91151b69ad2 · Patch
• https://github.com/TicklishHoneyBee/nodau/pull/26 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-4399 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-4399 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4399 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4399 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4399 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-4399 · Security Note
• https://t.me/cvenotify/39574 · Telegram Post
• https://vuldb.com/?id.215252 · Note
• https://t.me/cvenotify/39740 · Telegram Post