CVE-2021-26599
1 advisory.
Packagist/impresscms/impresscms CVE-2021-26599: critical 9.8
SQL Injection in ImpressCMS
Action: Upgrade impresscms/impresscms to 1.4.3 or later.
composer require impresscms/impresscms:1.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.3 | - |
Fixed versions
| 1.4.3 |
Sources
- osv: GHSA-jc4v-vvg6-xg78
- https://nvd.nist.gov/vuln/detail/CVE-2021-26599
- https://hackerone.com/reports/1081145
- https://github.com/ImpressCMS/impresscms
- https://github.com/ImpressCMS/impresscms/releases/tag/v1.4.3
- http://karmainsecurity.com/KIS-2022-04
- http://packetstormsecurity.com/files/166404/ImpressCMS-1.4.2-SQL-Injection.html
- http://seclists.org/fulldisclosure/2022/Mar/46
CVE-2021-26599 · published · modified · JSON