Sql injection

2019-11-0600:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

JSON

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to email templates can send malicious SQL queries and obtain access to sensitive information stored in the database.

CPENameOperatorVersion
magentoge2.3.0
magentolt2.3.2
magentoge2.2.0
magentolt2.2.10
magentoge2.2.0
magentolt2.2.10
magentoeq2.3.2
magentoeq2.3.2
magentoge2.3.0
magentolt2.3.2