Vendor
manticoresoftware
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Manticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass
Manticore Search versions 27.0.0 before 28.4.4 fail to validate permissions for all statements in multi-statement SQL requests, allowing read-only users to execute unauthorized queries. Attackers can append additional SELECT statements after the first stateme…