CVE-2018-17232

SQL injection vulnerability in archivebot.py in docmarionum1 Slack ArchiveBot (aka slack-archive-bot) before 2018-09-19 allows remote attackers to execute arbitrary SQL commands via the text parameter to cursor.execute().

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-09-20

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Slack Archivebot (Slack Archivebot Project)

References

• https://github.com/docmarionum1/slack-archive-bot/issues/12