CVE-2022-46763

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-27 · updated 2026-06-17
Weakness: CWE-89

Description

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.

Affected products

TrueConf Server: before 5.2.6 — fixed in 5.2.6

How to fix

Upgrade to a fixed version: TrueConf Server 5.2.6. Check the vendor advisory for mitigations.

References

https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
https://solidlab.ru/our-news/145-trueconf.html
https://vuldb.com/?diff.216851
https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt
https://solidlab.ru/our-news/145-trueconf.html
https://vuldb.com/?diff.216851

Get alerted when CVE-2022-46763 or the next vulnerability affects your stack