CVE-2022-43441

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-43441

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43441.json

Aliases

• GHSA-jqv5-7xpx-qj74

Related

• DSA-5373-1

Published

2023-03-16T21:15:11Z

Modified

2023-11-29T09:43:33.443486Z

Details

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability.

References

• https://github.com/TryGhost/node-sqlite3/security/advisories/GHSA-jqv5-7xpx-qj74
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1645