PT-2023-11815

CVE-2020-36645

·

Published

2023-01-07

·

Updated

2026-02-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions square squalor versions prior to v0.0.0
Description A critical issue was found in square squalor, affecting an unknown part, leading to sql injection. The manipulation with the table name parameter is potentially vulnerable to SQL injection.
Recommendations For versions prior to v0.0.0, upgrade to version v0.0.0 to address this issue. As a temporary workaround, consider restricting the use of the table name parameter to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-3HC7-2XCC-7P8F
GO-2023-1295
Found an issue in the description? Have something to add? Feel free to write us 👾