high8.2
CVE-2020-15153
Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection.
Impact
Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ampache | Ampache | before 4.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ampache/ampache/commit/e92cb6154c32c513b9c07e5fdbf5ac7de81ef5ed
- https://github.com/ampache/ampache/releases/tag/4.2.2
- https://github.com/ampache/ampache/security/advisories/GHSA-phr3-mpx5-7826
- https://github.com/ampache/ampache/commit/e92cb6154c32c513b9c07e5fdbf5ac7de81ef5ed
- https://github.com/ampache/ampache/releases/tag/4.2.2
- https://github.com/ampache/ampache/security/advisories/GHSA-phr3-mpx5-7826