Arp-Guard Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2019-18663

A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbitrary SQL commands via the user_id parameter.

9.8CVSS

9.9AI Score

0.002EPSS

2019-11-04 08:15 PM