CVE-2021-26830
1 advisory.
Packagist/tribalsystems/zenario CVE-2021-26830: critical 9.1, EPSS 4.57%
SQL Injection in tribalsystems/zenario
Action: Upgrade tribalsystems/zenario to 8.8.53370 or later.
composer require tribalsystems/zenario:8.8.53370Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.8.53370 | - |
Fixed versions
| 8.8.53370 |
Sources
- osv: GHSA-w4f3-7f7c-x652
- https://nvd.nist.gov/vuln/detail/CVE-2021-26830
- https://github.com/TribalSystems/Zenario/commit/2c82a4d126c8446106347ef603b157f2d4175fd1
- https://edhunter484.medium.com/blind-sql-injection-on-zenario-cms-b58b6820c32d
- https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370
- https://www.exploit-db.com/exploits/49642
CVE-2021-26830 · published · modified · JSON