Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m236-84g9-jvrg

Опубликовано: 22 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to inject and execute arbitrary SQL queries.

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to inject and execute arbitrary SQL queries.

EPSS

Процентиль: 16%
0.00052
Низкий

8.6 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.6
nvd
17 дней назад

AES contains a SQL injection vulnerability due to an inactive configuration that prevents the latest SQL parsing logic from being applied. When this configuration is not enabled, crafted input may be improperly handled, allowing attackers to inject and execute arbitrary SQL queries.

EPSS

Процентиль: 16%
0.00052
Низкий

8.6 High

CVSS3

Дефекты

CWE-20