Lucene search

K
osvGoogleOSV:GHSA-Q5MQ-6FJG-4MW8
HistoryNov 19, 2021 - 8:42 p.m.

SQL Injection in thinkjs

2021-11-1920:42:32
Google
osv.dev
7

0.002 Low

EPSS

Percentile

57.6%

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.

CPENameOperatorVersion
thinkjsle3.2.14

0.002 Low

EPSS

Percentile

57.6%