CVE-2022-24827— SQL Injection in elide-datastore-aggregation
Quick assessment
Affected
yahoo elide
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
elide-datastore-aggregation中的SQL注入
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-24827
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQL Injection in elide-datastore-aggregation
Source: CVE Program / CVE List V5
Vulnerability Description
Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provided parameter), and a parameterized column of type TEXT. There is the potential for a hacker to provide a carefully crafted query that would bypass server side authorization filters through SQL injection. A recent patch to Elide 6.1.2 allowed the '-' character to be included in parameterized TEXT columns. This character can be interpreted as SQL comments ('--') and allow the attacker to remove the WHERE clause from the generated query and bypass authorization filters. A fix is provided in Elide 6.1.4. The vulnerability only exists for parameterized columns of type TEXT and only for analytic queries (CRUD is not impacted). Workarounds include leveraging a different type of parameterized column (TIME, MONEY, etc) or not leveraging parameterized columns.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2022-24827
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-24827
请登录查看更多情报信息。
Patches & Fixes for CVE-2022-24827 (1)
-
https://github.com/yahoo/elide/pull/2581 x_refsource_MISC
Vendor Advisories for CVE-2022-24827 (1)
-
https://github.com/yahoo/elide/security/advisories/GHSA-8xpj-9j9g-fc9r x_refsource_CONFIRM
Other References for CVE-2022-24827 (1)
-
https://github.com/yahoo/elide/releases/tag/6.1.4 x_refsource_MISC
IV. Related Vulnerabilities
Same vendor: yahoo
-
CVE-2026-57954
Elide 7.1.17 - Permission Bypass in Sort Expression Validati -
CVE-2026-34043
Serialize JavaScript has CPU Exhaustion Denial of Service vi -
CVE-2020-5289
Read permissions not enforced for client provided filter exp -
CVE-2019-16769
Affected versions of serialize-javascript are vulnerable to
Same weakness: CWE-89
-
CVE-2026-79845
code-projects Simple Inventory System edit.php sql injection -
CVE-2026-79804
SililaWijesinghe Food Ordering System search.php sql injecti -
CVE-2026-75498
Webkul QloApps SQL injection -
CVE-2026-75497
Webkul QloApps SQL injection -
CVE-2026-78468
FluentCRM Pro <= 3.1.12 - Authenticated (Author+) SQL Inject
V. Comments for CVE-2022-24827
No comments yet