Affected versions of the foundation-sites package are vulnerable to SQL Injection due to not properly escaping the startkey/endkey in the allDocs function...
6.9CVSS5.8AI score
SaveExploits0References2
Mend•added 2026/05/13 10:27 p.m.•6 views
WS-2017-0150
Affected versions of the package are vulnerable to SQL Injection due to not properly escaping the startkey/endkey in the allDocs function...