Lucene search

CVE-2024-43415

🗓️ 12 Nov 2024 16:21:15Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Improper neutralization of SQL command in decidim_awesome-module allows authenticated admin to manipulate queries and execute command

Reporter	Title	Published	Views	Family All 8
OSV	Decidim-Awesome has SQL injection in AdminAccountability	12 Nov 202419:52	–	osv
NVD	CVE-2024-43415	12 Nov 202416:15	–	nvd
Cvelist	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	cvelist
CVE	CVE-2024-43415	12 Nov 202416:15	–	cve
Vulnrichment	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	vulnrichment
Veracode	SQL Injection	4 Dec 202419:06	–	veracode
RubySec	Decidim-Awesome has SQL injection in AdminAccountability	11 Nov 202421:00	–	rubygems
Github Security Blog	Decidim-Awesome has SQL injection in AdminAccountability	12 Nov 202419:52	–	github

Source	Link
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f
pentest	www.pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/commit/84374037d34a3ac80dc18406834169c65869f11b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2024 16:15Current

9.3High risk

Vulners AI Score9.3

CVSS39

EPSS0.0004

SSVC