CVE-2022-4860

KRITISCH 9.8CVE-2022-4860 · Published 30/12/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-4860 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in metrics (kbase).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.64%, höher als bei 51.2% aller Schwachstellen.
Abhilfe: auf 2022-05-22 oder neuer aktualisieren.

Package	Affected versions	Patched versions
metrics kbase	`< 2022-05-22`	`2022-05-22`

Description

A vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function upload_user_data of the file source/daily_cron_jobs/methods_upload_user_stats.py. The manipulation leads to sql injection. The patch is named 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217059.

References

kbase/metrics commit 959dfb6 · Patch
kbase/metrics#77 · Patch
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free