Loading HuntDB...

GHSA-jcwg-4q3h-fc3w

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.

Related CVEs

Key Information

GHSA ID
GHSA-jcwg-4q3h-fc3w
Published
April 15, 2022 12:00 AM
Last Modified
April 24, 2022 12:00 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.