CVE-2020-10190 - An issue was discovered in MunkiReport before 5.3.0

Back Back to CVE browser

HIGH

An issue was discovered in MunkiReport before 5.3.0

Published Mar 9, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.24%

Description

An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://github.com/munkireport/munkireport-php/releases
x_refsource_MISCThird Party Advisory
https://github.com/munkireport/munkireport-php/wiki/20200309-Authenticated-SQL-injection
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/munkireport/munkireport-php/releases		x_refsource_MISCThird Party Advisory
https://github.com/munkireport/munkireport-php/wiki/20200309-Authenticated-SQL-injection		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2020

Updated Aug 4, 2024

Reserved Mar 6, 2020

Link CVE-2020-10190

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-10190

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-10190