What’s Vulnerable › Vulnerabilities

CVE-2022-3751: SQL Injection in owncast/owncast

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-29 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.

Affected products

• owncast: before 0.0.13 — fixed in 0.0.13

How to fix

Upgrade to a fixed version: owncast 0.0.13. Check the vendor advisory for mitigations.

References

• https://github.com/owncast/owncast/commit/23b6e5868d5501726c27a3fabbecf49000968591
• https://huntr.dev/bounties/a04cff99-5d53-45e5-a882-771b0fad62c9
• https://github.com/owncast/owncast/commit/23b6e5868d5501726c27a3fabbecf49000968591
• https://huntr.dev/bounties/a04cff99-5d53-45e5-a882-771b0fad62c9
• https://huntr.com/bounties/a04cff99-5d53-45e5-a882-771b0fad62c9

Get alerted when CVE-2022-3751 or the next vulnerability affects your stack