high8.8
CVE-2022-3798
IBAX go-ibax vulnerable to SQL injection
Impact
A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212634 is the identifier assigned to this vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/IBAX-io/go-ibax | < 1.4.2 | 1.4.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibax | Go-Ibax | All versions |