SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the QuerySubscribers function. An attacker can escalate privileges by injecting malicious SQL commands. Remediation Upgrade github.com/knadh/listmonk/models to version 5.0.0 or higher. References - GitHub Commit - POC...

listmonk 安全漏洞

listmonk is a high performance, self-hosted, newsletter and mailing list manager with a modern dashboard by Kailash Nadh Personal Developer. A security vulnerability exists in listmonk versions v2.4.0 through v4.1.0, which stems from an SQL injection in the QuerySubscribers function that could le...