CVE-2019-10762 - columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping

CRITICAL

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping

Published Oct 30, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.42%

columnQuote in medoo before 1.7.5 allows remote attackers to perform a SQL Injection due to improper escaping.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Medoo

n/a

Version	Status	Constraints
All versions prior to version 1.7.5	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-2247		Advisory
https://github.com/advisories/GHSA-q9p4-qfc8-fvpp		Advisory
https://github.com/catfan/Medoo/commit/659864b393961bf224bba1efc03b7dcbed7de533		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10762
https://snyk.io/vuln/SNYK-PHP-CATFANMEDOO-474562		x_refsource_MISCThird Party Advisory