CyberRota Analysis
AI-GeneratedAzuraCast versions prior to 0.23.8 are vulnerable to a DQL injection in the sortOrder API parameter, allowing attackers to inject malicious DQL expressions. This can lead to unauthorized access to sensitive database information, including user credentials and station settings. Organizations using affected versions should prioritize patching to mitigate the risk of data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AzuraCast before 0.23.8 contains a DQL injection vulnerability in the sortOrder API parameter of AbstractSearchableListAction.php. Attackers can inject arbitrary DQL expressions through the sortOrder parameter to extract sensitive database information including user credentials and station settings.