Sql injection

2023-01-0810:15:00

PRIOn knowledge base

www.prio-n.com

critical

sql injection

corincerami curiosity

image controller

patch

vdb-217639

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.2%

JSON

A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of the file app/controllers/image_controller.rb. The manipulation of the argument sol leads to sql injection. The patch is named d64fddd74ca72714e73f4efe24259ca05c8190eb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217639.

CPENameOperatorVersion
curiosityeq< 1272014

CPE	Name	Operator	Version
	curiosity	eq	< 1272014

References

github.com/corincerami/curiosity/commit/d64fddd74ca72714e73f4efe24259ca05c8190eb

vuldb.com/?ctiid.217639

vuldb.com/?id.217639