← Back to browse · API

CVE-2022-38488

Severity
CRITICAL
CVSS
9.8
EPSS
0.14132
Risk score
44.15
CISA KEV
No
PoC
No
Published
2022-12-14
Modified
2025-04-22
First seen
2026-08-07
Aliases
EUVD-2022-41071, GHSA-VV25-WJRQ-FCV6
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-41071

Description

logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.

References