CVE-2022-38538

Description

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/hhyo/Archery/blob/v1.8.5/sql/urls.py#L145 ↗
• https://announcements.bybit.com/en-US/article/bybit-improves-the-security-of-the-open-source-community-blt626818c0ee8c48a6/ ↗
• https://github.com/hhyo/Archery/issues/1841 ↗