critical9.8
CVE-2023-42284
Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query.
Impact
Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tyk | Tyk | Version 5.0.3 |