CVE-2022-3801

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380107.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2022-380117.3Raw Image Extension Remote Code Execution VulnerabilityCVE-2022-380127.7Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2022-380137.5.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2022-380147.0Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityCVE-2022-380156.5Windows Hyper-V Denial of Service VulnerabilityCVE-2022-380168.8Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityCVE-2022-380176.8StorSimple 8000 Series Elevation of Privilege VulnerabilityCVE-2022-380197.8AV1 Video Extension Remote Code Execution VulnerabilityCVE-2022-38028.8A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/CVE-2022-380207.3Visual Studio Code Elevation of Privilege VulnerabilityCVE-2022-380217.0Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVE-2022-3801: High severity, CVSS 8.8 | Vulnix