GHSA-5fgp-c4mg-4552
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. This can be done as any authenticated user or through cross-site request forgery at ‘firm_filter’ parameter.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 22, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.