ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.
Summary
ZenTao Biz < 6.5, ZenTao Max < 3.0, ZenTao Open Source Edition < 16.5, and ZenTao Open Source Edition < 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database query. A remote unauthenticated attacker can exploit this issue to execute crafted SQL expressions and retrieve sensitive information from the backend database, including user and application data. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-07 UTC.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Qingdao Esoft Tianchuang Network Technology Co., Ltd. | ZenTao Biz | before 6.5 | 6.5 | Patch available | CNA |
| Qingdao Esoft Tianchuang Network Technology Co., Ltd. | ZenTao Max | before 3.0 | 3.0 | Patch available | CNA |
| Qingdao Esoft Tianchuang Network Technology Co., Ltd. | ZenTao Open Source Edition | before 16.5; before 16.5.beta1 | 16.5, 16.5.beta1 | Patch available | CNA |
- ZenTao Biz VendorQingdao Esoft Tianchuang Network Technology Co., Ltd. Affected before 6.5 Fixed in 6.5 Patch available CNA
- ZenTao Max VendorQingdao Esoft Tianchuang Network Technology Co., Ltd. Affected before 3.0 Fixed in 3.0 Patch available CNA
- ZenTao Open Source Edition VendorQingdao Esoft Tianchuang Network Technology Co., Ltd. Affected before 16.5; before 16.5.beta1 Fixed in 16.5, 16.5.beta1 Patch available CNA
Remediation
- Fix · CNA ZenTao Biz (Qingdao Esoft Tianchuang Network Technology Co., Ltd.) Fixed in 6.5
- Fix · CNA ZenTao Max (Qingdao Esoft Tianchuang Network Technology Co., Ltd.) Fixed in 3.0
- Fix · CNA ZenTao Open Source Edition (Qingdao Esoft Tianchuang Network Technology Co., Ltd.) Fixed in 16.5, 16.5.beta1
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4984
- 2026-10-03 Alias added: GHSA-33mq-62qg-c5mm
References
Patch 4
- https://www.zentao.pm/download/zentao-community-edition-release-65-1171.html
- https://www.zentao.pm/download/zentao-community-edition-release-30-1172.html
- https://www.zentao.pm/download/zentao-community-edition-release-165-1170.html
- https://www.zentao.pm/download/zentao-community-edition-release-1651-1143.html
Sources
- CVE-2022-4984 · CVE Program
- CVE-2022-4984 · NVD
- FIRST EPSS
- GHSA-33mq-62qg-c5mm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences