Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21198
HistoryAug 13, 2019 - 6:27 a.m.

SQL Injection

2019-08-1306:27:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

27.3%

magento/community-edition is vulnerable to SQL injection. The vulnerability exists as a user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.

0.001 Low

EPSS

Percentile

27.3%