Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21992
HistoryNov 20, 2019 - 4:18 a.m.

SQL Injection

2019-11-2004:18:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

49.6%

contao/core-bundle is vulnerable to SQL injection. The vulnerability exists in the value of strField in the file manager search filter, which allows a remote attacker to inject and execute arbitrary SQL queries through the affected parameter.

0.001 Low

EPSS

Percentile

49.6%