Debian/civicrm: critical 9.8
PEAR HTML_QuickForm version 3.2.14 contains an eval injection (CWE-95) vulnerability in HTML_QuickForm's getSubmitValue method, HTML_QuickForm's validate method, HTML_QuickForm_hierselect's _setOption
Action: Upgrade civicrm to 5.3.1+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.1+dfsg-1 | - |
Fixed versions
| 5.3.1+dfsg-1 |
Sources
published · modified · JSON