rttys SQL Injection vulnerability

HIGH 8.8CVE-2022-38867 · GHSA-54q4-74p3-mgcw · Published 15/02/2023 · updated 17/06/2026

In short

CVE-2022-38867 is a HIGH (CVSS 8.8) vulnerability affecting github.com/zhaojh329/rttys, rttys (rttys project).
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
github.com/zhaojh329/rttys Go	`≥ 4.0.0, ≤ 4.0.2`	No fix yet
rttys rttys_project	`≥ 4.0.0, ≤ 4.0.2`	No fix yet

SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, and 4.0.2 in api.go, allows attackers to execute arbitrary code.

NVD description

SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbitrary code.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.