Skip to content

Commit 45315b5

Browse files
committed
Sync with GitHub Security Advisories
* Add CVSSv3 and GHSA ID to CVE-2022-29498
1 parent f6d8a21 commit 45315b5

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

gems/blazer/CVE-2022-29498.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
---
22
gem: blazer
33
cve: 2022-29498
4+
ghsa: qf9q-q4hh-qph3
45
url: https://github.com/ankane/blazer/issues/392
56
title: SQL injection for certain queries with variables
67
date: 2022-04-20
@@ -15,5 +16,6 @@ description: |
1516
Users cannot run any queries they could not have already run. However, an attacker
1617
could get a user to run a query they would not have normally run. If the data source
1718
has write permissions, this could include modifying data in some cases.
19+
cvss_v3: 7.5
1820
patched_versions:
19-
- '>= 2.6.0'
21+
- ">= 2.6.0"

0 commit comments

Comments
 (0)