CVE-2022-45135

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2.0 before 2.3.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue.

• CWE-89

• http://www.openwall.com/lists/oss-security/2023/11/30/3Mailing List, Third Party Advisory
• https://lists.apache.org/thread/lsvd1hmr2t2q823x21d5ygzgbj9jpvjpMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2023/11/30/3Mailing List, Third Party Advisory
• https://lists.apache.org/thread/lsvd1hmr2t2q823x21d5ygzgbj9jpvjpMailing List, Vendor Advisory

Published

Nov 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45129Payara before 2022-11-04, when deployed to the root context,…7.5
• CVE-2022-4513A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-45130Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/c…6.5
• CVE-2022-45132In Linaro Automated Validation Architecture (LAVA) before 20…9.8
• CVE-2022-45133Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10…6.5
• CVE-2022-45134Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10…9.8
• CVE-2022-45136Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC D…9.8
• CVE-2022-45137The configuration backend of the web-based management is vul…6.1
• CVE-2022-45138The configuration backend of the web-based management can be…9.8
• CVE-2022-45139A CORS Misconfiguration in the web-based management allows a…5.3
• CVE-2022-4514A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2022-45140The configuration backend allows an unauthenticated user to …9.8