We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f6d8a21 commit 45315b5Copy full SHA for 45315b5
1 file changed
gems/blazer/CVE-2022-29498.yml
@@ -1,6 +1,7 @@
1
---
2
gem: blazer
3
cve: 2022-29498
4
+ghsa: qf9q-q4hh-qph3
5
url: https://github.com/ankane/blazer/issues/392
6
title: SQL injection for certain queries with variables
7
date: 2022-04-20
@@ -15,5 +16,6 @@ description: |
15
16
Users cannot run any queries they could not have already run. However, an attacker
17
could get a user to run a query they would not have normally run. If the data source
18
has write permissions, this could include modifying data in some cases.
19
+cvss_v3: 7.5
20
patched_versions:
-- '>= 2.6.0'
21
+- ">= 2.6.0"
0 commit comments