GHSA-4xq4-6pcv-7ch4

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

Stash 1.0.3 allows SQL Injection via the downloadmp3.php download parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2020-15311
https://www.youtube.com/watch?v=mm4bfsZdLmA&t=1h53m

CVE ID

CVE-2020-15311

Связанные уязвимости

CVE-2020-15311

nvd

больше 5 лет назад

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-4080. Reason: This candidate is a duplicate of CVE-2008-4080.2. Notes: All CVE users should reference CVE-2008-4080.2 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVE ID

CVE-2020-15311