CVE-2020-21176

2021-02-0118:15:13

Google

osv.dev

8.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.6%

JSON

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.

CPENameOperatorVersion
thinkjseq1.1.0
thinkjseq2.2.11
thinkjseq1.1.9
thinkjseq2.0.15
thinkjseq3.2.6
thinkjseq3.0.0-beta1
thinkjseq3.2.10
thinkjseq2.2.21
thinkjseq2.0.16
thinkjseq2.0.0

Name	Operator	Version
thinkjs	eq	1.1.0
thinkjs	eq	2.2.11
thinkjs	eq	1.1.9
thinkjs	eq	2.0.15
thinkjs	eq	3.2.6
thinkjs	eq	3.0.0-beta1
thinkjs	eq	3.2.10
thinkjs	eq	2.2.21
thinkjs	eq	2.0.16
thinkjs	eq	2.0.0