A critical SQL injection vulnerability in Odine Solutions GateKeeper 1.0 allows authenticated attackers to execute arbitrary database queries, posing a significant risk of data exfiltration.

The application fails to properly sanitize input within the trafficCycle API endpoint (/rass/api/v1/trafficCycle/). This SQL injection flaw allows an authenticated attacker to inject malicious PostgreSQL commands, which can lead to unauthorized data access or disruption of database services.

The ability to perform arbitrary SQL queries against the backend database enables attackers to access, modify, or delete sensitive information stored within the GateKeeper environment. Given the CVSS score of 8.2, this vulnerability represents a high-severity risk that could lead to complete compromise of application data, potential regulatory non-compliance, and significant reputational damage.

Immediate Action: Update to the latest version of Odine Solutions GateKeeper provided by the vendor to remediate the vulnerable API endpoint.

Proactive Monitoring: Monitor API access logs for suspicious patterns, such as unusual URL parameters containing SQL syntax, characters like single quotes or semicolons, or unexpected database error responses.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection filtering rules configured to inspect traffic directed at the /rass/api/v1/trafficCycle/ endpoint.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the Exploit-DB entry 50381.

The presence of a public proof-of-concept significantly lowers the barrier for attackers to exploit this vulnerability. Organizations using Odine Solutions GateKeeper 1.0 must prioritize patching this flaw immediately to prevent potential data breaches. If patching is not immediately feasible, restrict access to the affected API endpoint through network-level controls or WAF rules to minimize exposure.