CVE-2017-14807 SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in susestudio-ui-server of SUSE Studio onsite allows remote attackers with admin privileges in Studio to alter SQL statements, allowing for extraction and modification of data. This issue affects:...

CVE-2017-14807

CVE-2017-14807 is an SQL injection vulnerability in SUSE Studio onsite susestudio-ui-server (affected: version 1.3.17-56.6.3 and prior). The issue is described as Improper Neutralization of Special Elements used in an SQL Command, enabling remote attackers with admin privileges in Studio to alter...