andreysanyuk/CVE-2023-42284

andreysanyuk/CVE-2023-42284

GitHubGitHub
GitHubgithub.com
Releases0
Proof of concept for CVE-2023-42284 in Tyk Gateway
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-42284↗
9.8 CRITICAL—

Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query.