Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84h3-pfxq-r99h

Опубликовано: 11 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02.

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02.

EPSS

Процентиль: 44%
0.00216
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

A unauthenticated SQL Injection has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this vulnerability to gain access to the underlying database. The vulnerability has been remediated in version 1.52.02.

EPSS

Процентиль: 44%
0.00216
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-89