VULNERABILITY INTELLIGENCE

CVE-2022-39303

CVSS score8.1 HIGH
EPSS probability0.91%
CISA KEVNot currently listed
Published2022-10-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.

Weakness classification

  • security-advisories@github.com: CWE-89

Primary references