high7.2
CVE-2022-0944
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
Impact
Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sqlpad | Sqlpad | before 6.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73
- https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb
- https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73
- https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb