CVEs-PoC/2021/CVE-2021-23214.md

CVE-2021-23214

Description

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon