CVE-2022-1883

HIGHNuclei

SQL Injection in camptocamp/terraboard

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-1883 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 15, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

camptocamp/terraboard

Browse camptocamp / camptocamp/terraboard
CVE ListBefore 2.2.0affected

terraboard

Browse camptocamp / terraboard
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHTerraboard <2.2.0 - SQL InjectionCVSS 8.8

Terraboard prior to 2.2.0 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.

Remediation

Upgrade Terraboard to version 2.2.0 or later to mitigate the SQL Injection vulnerability.

WeaknessesCWE-89
Authorsedoardottt
Template tagstime-based-sqlicvecve2022terraboardsqlihuntrcamptocampvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:camptocamp:terraboard:*:*:*:*:*:*:*:*
https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7/ https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7 https://nvd.nist.gov/vuln/detail/CVE-2022-1883 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

2