CVE-2022-3798

CVE-2022-3798 is a critical SQL injection vulnerability affecting the /api/v2/open/tablesInfo function within IBAX go-ibax. This flaw allows remote attackers to execute arbitrary SQL commands, potentially leading to full compromise of the underlying database. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in high impacts to confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation in the wild, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei, and it has garnered minimal community discussion or media coverage.