CVE-2020-15153

Name of the Vulnerable Software and Affected Versions Ampache versions prior to 4.2.2

Description The issue allows unauthenticated users to perform SQL injection. A fix for this issue is included in version 4.2.2 and the development branch.

Recommendations For versions prior to 4.2.2, update to version 4.2.2 or switch to the development branch to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations until the update can be applied.