low2.7
CVE-2023-37361
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.
Impact
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanderbilt | Redcap | before 12.3.2 before 12.0.26 |