Description
FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | freetakserver-ui | <= 1.9.8 | — | GHSA-jr2m-29wj-w9qc |
Medium · 6.5
CVE-2022-25506
EUVD-2022-1461GHSA-jr2m-29wj-w9qcPYSEC-2026-640
SQL Injection in FreeTAKServer-UI
Published Mar 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre