Lucene search
+L

3 matches found

OSV
OSV
added 2024/11/12 7:52 p.m.96 views

GHSA-CXWF-QC32-375F Decidim-Awesome has SQL injection in AdminAccountability

Vulnerability type: CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' Vendor: Decidim International Community Environment Has vendor confirmed: Yes Attack type: Remote Impact: Code Execution Escalation of Privileges Information Disclosure Affected component:...

9.3CVSS9.3AI score0.0068EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2024/11/12 7:52 p.m.25 views

Decidim-Awesome has SQL injection in AdminAccountability

Vulnerability type: CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' Vendor: Decidim International Community Environment Has vendor confirmed: Yes Attack type: Remote Impact: Code Execution Escalation of Privileges Information Disclosure Affected component:...

9CVSS9.3AI score0.0068EPSS
SaveExploits0References6Affected Software1
RubySec
RubySec
added 2024/11/12 12:00 a.m.23 views

Decidim-Awesome has SQL injection in AdminAccountability

Vulnerability type: CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' Vendor: Decidim International Community Environment Has vendor confirmed: Yes Attack type: Remote Impact: Code Execution Escalation of Privileges Information Disclosure Affected component:...

9CVSS8.6AI score0.0068EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder