CVE-2022-39303 Rea6 is a moderation bot that is vulnerable to SQL injection. The issue has been patched by using Javas PreparedStatements.

This vulnerability allows SQL injection. An attacker can manipulate SQL queries.  An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.
This vulnerability allows SQL injection. An attacker can manipulate SQL queries.  An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds. This vulnerability allows SQL injection. An attacker can manipulate SQL queries.  An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds. This vulnerability allows SQL injection. An attacker can manipulate SQL queries.  An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.
This vulnerability allows SQL injection. An attacker can manipulate SQL queries.  An attacker can inject malicious SQL code into the application. This issue has been

This vulnerability allows Injection

This vulnerability allows SQL injection. An attacker can manipulate SQL queries.   An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.
This vulnerability allows SQL injection. An attacker can manipulate SQL queries.   An attacker can inject malicious SQL code into the application. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds

Timeline

Published on: 10/13/2022 23:15:00 UTC
Last modified on: 10/17/2022 13:46:00 UTC

References

• https://github.com/Ree6-Applications/Ree6/compare/1.6.4...1.7.
• https://github.com/Ree6-Applications/Ree6/security/advisories/GHSA-69xv-xjfw-4pv8
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-39303