Description
Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Odinesolutions | Odine Solutions GateKeeper | 1.0 | — |
References
- ExploitDB-50381 exploit
- Odine Solutions GateKeeper Product Homepage product
- VulnCheck Advisory: Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection third-party-advisory