A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
History

Thu, 10 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Securifera

Published: 2023-08-09T18:35:32.937Z

Updated: 2024-10-10T12:48:06.441Z

Reserved: 2023-08-09T16:58:35.314Z

Link: CVE-2022-48604

cve-icon Vulnrichment

Updated: 2024-08-03T15:17:55.588Z

cve-icon NVD

Status : Modified

Published: 2023-08-09T19:15:14.393

Modified: 2023-11-07T03:56:38.937

Link: CVE-2022-48604

cve-icon Redhat

No data.