Skip to content
OpenAdvisories

Vendor

manticoresoftware

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass

    Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first stateme…