CVE-2019-15537

The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-23

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Proxystatistics (Cesnet)

References

• https://github.com/CESNET/proxystatistics-simplesamlphp-module/pull/18
• https://github.com/CESNET/proxystatistics-simplesamlphp-module/releases/tag/v3.1.0