CVE-2022-38537: Archerydms Archery

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop_time parameters in the binlog2sql interface.

Affected products

• Archerydms Archery: from 1.4.5, before 1.9.0 (fixed in 1.9.0)

Published 2022-09-13. Last modified 2026-06-17.