Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption. This is similar to CVE-2021-23214 for PostgreSQL.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Tyler Odyssey 信任管理问题漏洞
Vulnerability Description
Tyler Technologies Tyler Odyssey是美国Tyler Technologies公司的一个法院和司法软件系统。 Tyler Odyssey 存在安全漏洞，该漏洞源于当 Odyssey 配置为使用证书公用名进行客户端身份验证时，中间人攻击者可以在首次建立连接时注入任意 SQL 查询，即使使用了 SSL 证书验证和加密。
CVSS Information
N/A
Vulnerability Type
N/A