~ / search / GHSA-hq4f-mv3q-8wcv

GHSA-hq4f-mv3q-8wcv

Craft CMS SQL injection vulnerability via the GraphQL API endpoint

Source: GitHub Advisory Database (reviewed) Critical CVE-2024-37843

Packages

EcosystemPackageAffectedFixed in
Packagist craftcms/cms <= 3.7.31 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability via the GraphQL API endpoint.

References

External links from the advisory. They lead to third-party sites.