Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2021/12/13 7:50 p.m.40 views

CVE-2021-43822 SQL injection in jackalope/jackalope-doctrine-dbal

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...

8.5CVSS9AI score0.00967EPSS
SaveExploits0References2
Rows per page
Query Builder