Description (CNA)
SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| rtxteam / rtxteam/rtx | affected unspecified before checkpoint_2022-04-20 |
CWE
CWE-89
References
- https://huntr.dev/bounties/fc4eb544-ef1e-412d-9fdb-0ceb04e038fe
- https://github.com/rtxteam/rtx/commit/fa2797e656e3dba18f990a2db1f0f029d41f1921
ADP enrichment
No English description supplied.