Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:azuracast:azuracast:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

AzuraCast DQL Injection Vulnerability in sortOrder Parameter

AzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection flaw in the sortOrder API parameter, allowing attackers to exfiltrate sensitive database contents.

AzuraCast +2 ssrf web-application vulnerability webserver broken-access-control api-security credential-exposure web-vulnerability +2
4r 3t 1c