← CVE Intelligence

CVE-2022-30619

Agile Point - Agile Point NX SQL injection (SQLi) PUBLISHED

Description (CNA)

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, in any kind of rule. under the function : /AgilePointServer/Extension/FetchUsingEncodedData in the parameter: EncodedData

Affected (CNA)

Vendor / productVersions
Agile Point / Agile Point NXaffected 8.0 before 7.0*

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.