~ / search / GHSA-9gv2-2m38-j6cx

GHSA-9gv2-2m38-j6cx

BEdita vulnerable to SQL injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-15570

Packages

EcosystemPackageAffectedFixed in
Packagist bedita/bedita < 4.0.0 4.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters due to a lack of JSON escaping.

References

External links from the advisory. They lead to third-party sites.