| id: GO-TEST-ID |
| modules: |
| - module: github.com/zhaojh329/rttys |
| versions: |
| - introduced: 4.0.0 |
| summary: rttys SQL Injection vulnerability |
| description: |- |
| SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, and 4.0.2 in api.go, |
| allows attackers to execute arbitrary code. |
| cves: |
| - CVE-2022-38867 |
| ghsas: |
| - GHSA-54q4-74p3-mgcw |
| references: |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2022-38867 |
| - web: https://github.com/zhaojh329/rttys/issues/117 |
| - package: https://github.com/zhaojh329/rttys |
| notes: |
| - 'create: unsupported version range event models.Event{Introduced:"", Fixed:"", LastAffected:"4.0.2", Limit:""}' |
| - 'lint: github.com/zhaojh329/rttys: bad version "4.0.0": github.com/zhaojh329/rttys@v4.0.0: invalid version: should be v0 or v1, not v4' |
