Vulnerability · Published Nov 7, 2022 · Assigned by CERTVDE
CVE-2020-12507s::can moni::tools autheticated SQL injection
High 8.8
In plain English
A high-severity SQL injection in moni:tools from s::can. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| s::can | moni:tools | 1.0 – before 4.2 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H