Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-4262 EUVD-2022-7485GHSA-3fhj-wpvj-x5w8

laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection

Published Dec 19, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is fbc2d94f43d0dc772767a5bdb2681133036f935e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216271.

Affected products

VendorProductAffectedFixed
— laravel-jqgrid — —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist mgallegos/laravel-jqgrid <= 1.3.0 — GHSA-3fhj-wpvj-x5w8

References