CVE-2023-42284: Tyk

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query.

Affected products

• Tyk Tyk: version 5.0.3 only

Published 2023-11-07. Last modified 2026-06-17.