Description
BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | bedita/bedita | < 4.0.0 | 4.0.0 | GHSA-9gv2-2m38-j6cx |
Critical · 9.8
CVE-2019-15570
EUVD-2022-3377GHSA-9gv2-2m38-j6cx
BEdita vulnerable to SQL injection
Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre