CVE-2017-20171

Description

A vulnerability classified as critical has been found in PrivateSky apersistence. This affects an unknown part of the file db/sql/mysqlUtils.js. The manipulation leads to sql injection. The name of the patch is 954425f61634b556fe644837a592a5b8fcfca068. It is recommended to apply a patch to fix this issue. The identifier VDB-218457 was assigned to this vulnerability.

Related CPE's

aapersistence_projectapersistence********

References

https://vuldb.com/?ctiid.218457

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.218457

Permissions RequiredThird Party AdvisoryVDB Entry

https://github.com/PrivateSky/apersistence/commit/954425f61634b556fe644837a592a5b8fcfca068

PatchThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io