CVE-2022-39303

    Dashboard / Vulnerabilities / CVE-2022-39303

    CVE-2022-39303

    Published: 13 Oct 2022Last Modified: 12 Aug 2026

    Summary: Ree6 vulnerable to SQL Injection

    Details: Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.

    References: https://github.com/Ree6-Applications/Ree6/compare/1.6.4...1.7., https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39303.json, https://github.com/Ree6-Applications/Ree6/security/advisories/GHSA-69xv-xjfw-4pv8, https://nvd.nist.gov/vuln/detail/CVE-2022-39303

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -b5c4358cedcc4f5c6e40c6052741cf60056c58cc

    Affected versions

    1.6.4
    1.6.3
    1.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-39303 | CVE-DB