Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jgg-53cv-7j3q

Опубликовано: 21 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

EPSS

Процентиль: 58%
0.00362
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

EPSS

Процентиль: 58%
0.00362
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89