CVE-2022-38539: Archerydms Archery

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.

Affected products

• Archerydms Archery: from 1.7.5, up to and including 1.8.5

Published 2022-09-13. Last modified 2026-06-17.