CVE-2021-31777

Name of the Vulnerable Software and Affected Versions dce extension versions 2.2.0 through 2.6.x before 2.6.2 dce extension versions 2.7.x before 2.7.1

Description The issue allows SQL Injection via a backend user account. This can be exploited to inject malicious SQL code, potentially leading to unauthorized access or data manipulation.

Recommendations For dce extension versions 2.2.0 through 2.6.x before 2.6.2, update to version 2.6.2 or later. For dce extension versions 2.7.x before 2.7.1, update to version 2.7.1 or later.