MEDIUM6.5

GHSA-jjf4-959w-f545

SQL Injection vulnerability in Reportico Till

Details

SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system information via the project parameter.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/reportico-web/reportico

Introduced in: 0

No fixed version published yet for reportico-web/reportico (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-47438[ADVISORY]
https://github.com/reportico-web/reportico/issues/52[WEB]
https://github.com/reportico-web/reportico[PACKAGE]