Skip to content
Threat Feed
Subscribe

Product

AzuraCast (<= 0.23.x)

1 brief RSS
high advisory

AzuraCast DQL Injection Vulnerability in sortOrder Parameter

AzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection flaw in the sortOrder API parameter, allowing attackers to exfiltrate sensitive database contents.

AzuraCast +2 ssrf web-application vulnerability webserver broken-access-control api-security credential-exposure web-vulnerability +2
4r 3t 1c