CVE-2022-3751

Description

owncast is vulnerable to SQL Injection in github.com/owncast/owncast

How to fix CVE-2022-3751

To remediate CVE-2022-3751, upgrade the affected package to a fixed version below.

• Go/github.com/owncast/owncast—upgrade to 0.0.13 or later
• Go/github.com/owncast/owncast—upgrade to 0.0.13 or later

Is CVE-2022-3751 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 0.0.13
• from 0, < 0.0.13

CVSS scores

References (8)

• ADVISORYgithub.com/advisories/GHSA-cvh4-cjc9-84qm
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-3751
• PATCHgithub.com/owncast/owncast
• WEBgithub.com/owncast/owncast/commit/23b6e5868d5501726c27a3fabbecf49000968591
• WEB