Description

In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.

Remediation

References

CVE-2022-34296

Related Vulnerabilities

WordPress Plugin Accessibility Suite by Online ADA SQL Injection (2.0.10)

WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-11823)

IBM RTC Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2020-4544)

OpenSSL Improper Access Control Vulnerability (CVE-2016-7054)

Severity

High

Classification

CVE-2022-34296 CWE-863 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities