1 result · Feed
-
Critical 9.8
DBAL 3 SQL Injection Security Vulnerability
Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input t…