Skip to content
OpenAdvisories
Critical · 10.0 CVE-2022-1531 EUVD-2022-24828GHSA-p4qf-98m6-vm84

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/rtx

Published Apr 29, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Description

SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is critical as it can lead to remote code execution and thus complete server takeover.

Affected products

VendorProductAffectedFixed
rtxteam rtxteam/rtx unspecified – < checkpoint_2022-04-20 checkpoint_2022-04-20

References