1 matches found
CVE-2021-43822: Improper Neutralization of Special Elements used in an SQL Command
Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...
8.5CVSS5.8AI score0.00967EPSS
SaveExploits0References2
20