CVE-2022-4399

A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.

• CWE-707
• CWE-89

• https://github.com/TicklishHoneyBee/nodau/commit/7a7d737a3929f335b9717ddbd31db91151b69ad2Patch, Third Party Advisory
• https://github.com/TicklishHoneyBee/nodau/pull/26Patch, Third Party Advisory
• https://vuldb.com/?id.215252Third Party Advisory, VDB Entry
• https://github.com/TicklishHoneyBee/nodau/commit/7a7d737a3929f335b9717ddbd31db91151b69ad2Patch, Third Party Advisory
• https://github.com/TicklishHoneyBee/nodau/pull/26Patch, Third Party Advisory
• https://vuldb.com/?id.215252Third Party Advisory, VDB Entry

Published

Dec 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43980There is a stored cross-site scripting vulnerability in Pand…5.4
• CVE-2022-43982In Apache Airflow versions prior to 2.4.2, the "Trigger DAG …6.1
• CVE-2022-43983Browsershot version 3.57.2 allows an external attacker to re…8.2
• CVE-2022-43984Browsershot version 3.57.3 allows an external attacker to re…8.2
• CVE-2022-43985In Apache Airflow versions prior to 2.4.2, there was an open…6.1
• CVE-2022-43989Password recovery vulnerability in SICK SIM2x00 (ARM) Partnu…7.3
• CVE-2022-43990Password recovery vulnerability in SICK SIM1012 Partnumber 1…7.3
• CVE-2022-43995Sudo 1.8.0 through 1.9.12, with the crypt() password backend…7.1
• CVE-2022-43996The csaf_provider package before 0.8.2 allows XSS via a craf…5.4
• CVE-2022-43997Incorrect access control in Aternity agent in Riverbed Atern…7.8
• CVE-2022-43999An issue was discovered in BACKCLICK Professional 5.9.63. Du…9.8
• CVE-2022-4400A vulnerability was found in zbl1996 FS-Blog and classified …6.1