CVE-2017-20172

Medium

Description

A vulnerability was found in ridhoq soundslike. It has been classified as critical. Affected is the function get_song_relations of the file app/api/songs.py. The manipulation leads to sql injection. The patch is identified as 90bb4fb667d9253d497b619b9adaac83bf0ce0f8. It is recommended to apply a patch to fix this issue. VDB-218490 is the identifier assigned to this vulnerability.

SeverityMedium

CVSS5.5

Exploit probability—

ProductSoundslike

PublishedJan 18, 2023

First seenJan 18, 2023

Weakness typeCWE-89SQL injection

How to fix

Update

soundslike_project soundslike2017-03-17 or later

Patches

github.com/ridhoq/soundslike/commit/90bb4fb667d9253d497b619b9adaac83bf0ce0f8

Affected products

Product	Affected versions	Fixed in
soundslike_project soundslike	v < 2017-03-17	2017-03-17

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.