CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

Github Security Blog•added 2024/08/15 6:31 p.m.•20 views

SQL injection in github.com/stashapp/stash

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...

6.3CVSS8.2AI score0.01179EPSS

Exploits0References5Affected Software1

OSV•added 2024/08/15 6:31 p.m.•10 views

GHSA-75JF-52JG-QQH4 SQL injection in github.com/stashapp/stash

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...

9.1CVSS6.5AI score0.01179EPSS

Exploits0References6

NVD•added 2024/08/15 6:15 p.m.•17 views

CVE-2024-32231

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...

6.3CVSS0.01179EPSS

Exploits0References3

Vulnrichment•added 2024/08/15 12:0 a.m.•12 views

CVE-2024-32231

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter...

8.3AI score0.01179EPSS

Exploits0References3

CVE•added 2024/08/15 12:0 a.m.•90 views

CVE-2024-32231

CVE-2024-32231 affects Stash up to v0.25.1, where a SQL injection vulnerability exists in the sort parameter. The Nuclei template and multiple sources describe an attacker-supplied value in sort that can influence SQL execution, potentially exposing or modifying data. Affected vector appears tied...

6.3CVSS8.3AI score0.01179EPSS

Exploits0References3Affected Software1