CVE-2022-26245

CRITICAL CVSS: 9.8 Published: 2022-03-27 Modified: 2026-06-17

Description

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

Affected Platforms

Open-Falcon Falcon-Plus

Weakness Type

CWE-89

References