CVE:CVE-2022-26245
CNNVD:CNNVD-202203-2298
Falcon是一款嵌入式编程语言。
Falcon-plus 0.3 版本存在SQL注入漏洞，该漏洞源于/config/service/host.go中的grpName参数。
solution:Upgrade open-falcon falcon-plus to a higher version than 0.3,and avoid the version 0.3