CyberRota Analysis
AI-GeneratedA critical SQL injection vulnerability in Tencent APIJSON versions prior to 8.1.8 allows unauthenticated remote attackers to bypass access controls, enabling them to read arbitrary database tables through the Map-form @having operator. This flaw stems from inadequate role-based access checks within the APIJSONORM library, exposing sensitive data to unauthorized users. Organizations using this library, particularly those handling sensitive information, should prioritize immediate remediation to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.