Nagoya University: its information systems Q&A system was hit by blind SQL injection, and 2,086 email addresses of people who asked questions may have leaked

1. 2022-05-10

   From this day, the Q&A system was hit by "blind SQL injection", which probes the database from differences in its responses. There were further attacks on the 14th and 15th. [1] [2]

2. 2022-05-16

   It checked the system logs and found the attacks. [2]

3. 2022-06-28

   It announced the case and said the vulnerability had been fixed. [1] [2]

The email addresses of 2,086 people who had asked questions through the information systems Q&A system run by the university's information cooperation headquarters may have leaked. No misuse was confirmed. It will consider introducing a WAF and strengthen training on server management and information security. [1] [2]