Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•2 views

CVE-2021-43822: Improper Neutralization of Special Elements used in an SQL Command

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...

8.5CVSS5.8AI score0.00967EPSS
SaveExploits0References2
Rows per page
Query Builder