critical9.8
CVE-2018-18476
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
Impact
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nedap | Mysql-Binuuid-Rails | through 1.1.0 |