CVE-2022-24691: Dsk Dsknet

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in DSK DSKNet 2.16.136.0 and 2.17.136.5. A SQL Injection vulnerability allows authenticated users to taint database data and extract sensitive information via crafted HTTP requests. The type of SQL Injection is blind boolean based.

Affected products

• Dsk Dsknet: version 2.16.136.0 only; version 2.17.136.5 only

Published 2022-07-18. Last modified 2026-06-17.