Description (CNA)
A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TrueConf / TrueConf Server | affected 5.2.0.10225; unaffected 5.2.6.10025 through * |
CWE
CWE-89
References
- https://solidlab.ru/our-news/145-trueconf.html
- https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txt
- https://vuldb.com/?diff.216845
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.