← Back to browse · API

CVE-2022-47745

Severity
HIGH
CVSS
8.8
EPSS
0.15394
Risk score
40.59
CISA KEV
No
PoC
No
Published
2023-01-19
Modified
2025-04-04
First seen
2026-08-07
Aliases
EUVD-2022-50504, GHSA-XR2P-F39W-CJPV
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-50504

Description

ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.

References