1 matches found
SQL injection vulnerability via Marginalia::Comment
The 'marginalia' gem is affected by a SQL Injection vulnerability. All SQL queries are affected when a user controller argument is added as a component. This affects users that add a component that is user controller, for instance a parameter or a header. The issue is resolved in version 1.6...
9.8CVSS3.8AI score0.01381EPSS
SaveExploits0References1Affected Software1
20