CVE-2017-20172

CVE-2017-20172 is a critical SQL injection vulnerability affecting the get_song_relations function within the app/api/songs.py file of the ridhoq soundslike project. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise of the affected system. With a CVSS score of 9.8 (Critical), it presents a high risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.