Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9g7j-cq4x-5vfx

Опубликовано: 14 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.

EPSS

Процентиль: 65%
0.00483
Низкий

8.7 High

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
11 месяцев назад

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.

EPSS

Процентиль: 65%
0.00483
Низкий

8.7 High

CVSS4

Дефекты

CWE-89