Skip to content
OpenAdvisories
Unscored CVE-2023-42405 EUVD-2023-46857GHSA-mpjg-3h25-9886

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskServic…

Published Sep 14, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService.list(), bareMetalService.list(), and switchService.list().

References