CVE-2020-15887
1 advisory.
Packagist/munkireport/softwareupdate CVE-2020-15887: high 8.8
MunkiReport Software Update module is vulnerable to SQL injection
Action: Upgrade munkireport/softwareupdate to 1.6 or later.
composer require munkireport/softwareupdate:1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6 | - |
Fixed versions
| 1.6 |
Sources
- osv: GHSA-4qgh-m9vp-48xp
- https://nvd.nist.gov/vuln/detail/CVE-2020-15887
- https://github.com/munkireport/munkireport-php/releases
- https://github.com/munkireport/munkireport-php/releases/tag/v5.6.3
- https://github.com/munkireport/munkireport-php/wiki/20200722-SQL-Injection-in-softwareupdate-module
- https://github.com/munkireport/softwareupdate
- https://github.com/munkireport/softwareupdate/releases
CVE-2020-15887 · published · modified · JSON