Skip to content

CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-0944

Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-03-15
Updated: 2024-08-02
Assigning organization: @huntrdev

Description

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sqlpad sqlpad/sqlpad

unspecified to < 6.10.1affected

References