CVE-2022-0944

CVE-2022-0944 describes a critical template injection vulnerability in the connection test endpoint of sqlpad/sqlpad versions prior to 6.10.1, leading to Remote Code Execution (RCE). This high-severity flaw, rated 7.2 CVSS, allows authenticated attackers (PR:H) to execute arbitrary code with low attack complexity (AC:L), resulting in complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). Despite its high FAUCET Risk Score of 98/100 and elevated EPSS score, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion.