CVE-2021-47782CWE-89

Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection

High · published January 15, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ A sneaky SQL injection hides in Odine Solutions GateKeeper 1.0’s trafficCycle API endpoint, waiting for crafty attackers to send their malicious payloads! 🔥 Think of the trafficCycle API as a restaurant kitchen. If a chef receives an order without checking the ingredients, they might unwittingly whip up something unappetizing—or worse, harmful! In this case, attackers can manipulate database queries as easily as slipping a rotten ingredient into the mix. If exploited, an attacker could gain access to sensitive database information, potentially leading to data breaches and compromised user data. This is a serious risk that could leave you with an empty kitchen and a bad reputation!

Put simply

Think of the trafficCycle API as a restaurant kitchen. If a chef receives an order without checking the ingredients, they might unwittingly whip up something unappetizing—or worse, harmful! In this case, attackers can manipulate database queries as easily as slipping a rotten ingredient into the mix. This vulnerability allows remote attackers to inject malicious SQL queries via the trafficCycle API, which then manipulates PostgreSQL database queries without proper validation.

What to do

If exploited, an attacker could gain access to sensitive database information, potentially leading to data breaches and compromised user data. This is a serious risk that could leave you with an empty kitchen and a bad reputation! Patch immediately to the latest version that resolves this issue. Additionally, implement input validation and prepared statements to safeguard against SQL injection attacks. Regular audits of API endpoints can also help to catch this kind of vulnerability early! You've got this! Stay vigilant and secure your applications to keep the internet safe. 🛡️

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2026-01-15T23:25Z
EPSS history
Timeline
  • 15 JAN 23:25Z
    Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection
    cvelistv5