CVE-2021-4262
Medium
Description
A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is fbc2d94f43d0dc772767a5bdb2681133036f935e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216271.
SeverityMedium
CVSS5.5
Exploit probability—
ProductLaravel Jqgrid
PublishedDec 19, 2022
First seenDec 19, 2022
Weakness typeCWE-707CWE-707
How to fix
Update
- laravel_jqgrid_project laravel_jqgrid2017-10-09 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| laravel_jqgrid_project laravel_jqgrid | v < 2017-10-09 | 2017-10-09 |
| mgallegos/laravel-jqgridPackagist | v ≤ 1.3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.