# CVE-2022-0944

Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.

- Page: https://www.vulneraibility.com/cve/CVE-2022-0944
- CVSS: 7.2
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 8.51% (percentile 95.1)
- Unvetted proof-of-concept code on GitHub: 10 GitHub proofs of concept (first 2024-09-08)
- Weakness: CWE-1336
- Published: 2022-03-15

## Affected versions

- sqlpad sqlpad/sqlpad: affected < 6.10.1

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://huntr.dev/bounties/46630727-d923-4444-a421-537ecd63e7fb
- [other] https://github.com/sqlpad/sqlpad/commit/3f92be386c6cd3e5eba75d85f0700d3ef54daf73

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.