critical9.8
CVE-2019-15570
BEdita vulnerable to SQL injection
Impact
BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters due to a lack of JSON escaping.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | bedita/bedita | < 4.0.0 | 4.0.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bedita | Bedita | through 3.8.0 Version 4.0.0 |