GHSA-xgx2-332h-9x6q

ghsaUSosv

SQL Injection in Yeswiki

view advisory published 2022-03-26Licence: CC-BY-4.0

An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form. The issue was fixed in Yeswiki version 4.1.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-43091US	high7.5	1.41% (73rd)	—	2022-03-25
An SQL Injection vlnerability exits in Yeswiki doryphore 20211012 via the email parameter in the registration form.

references

External citations — patches, advisories, analysis.

https://github.com/yeswiki/yeswikiPACKAGE
https://github.com/yeswiki/yeswiki/commit/c9785f9a92744c3475f9676a0d8f95de24750094WEB
https://huntr.dev/bounties/07f245a7-ee9f-4b55-a0cc-13d5cb1be6e0WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-43091ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan