CVE-2022-24691

HIGH 7.1CVE-2022-24691 · Published 18/07/2022 · updated 17/06/2026

In short

CVE-2022-24691 is a HIGH (CVSS 7.1) vulnerability affecting dsknet (dsk).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dsknet dsk	`= 2.16.136.0= 2.17.136.5`	No fix yet

Description

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.

References

dsk.lu/fr/produits/temps-de-presence · Product
post-cyberlabs/CVE-Advisory · Exploit

More vulnerabilities in dsknet

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

dsknet

dsk

= 2.16.136.0= 2.17.136.5

No fix yet

More vulnerabilities in dsknet

See all →