CVE-2019-15569

HM Courts & Tribunals ccd-data-store-api before 2019-06-10 allows SQL injection, related to SearchQueryFactoryOperation.java and SortDirection.java.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-26

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Ccd-data-store-api (Gov)

References

• https://github.com/hmcts/ccd-data-store-api/pull/394