GHSA-fv4m-5j2c-787rCriticalCVSS 9.8

Bacula-web SQL Injection Vulnerabilities

Published
May 14, 2022
Last Modified
October 19, 2023

🔗 CVE IDs covered (1)

CVE-2017-15367 →

📋 Description

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.

🎯 Affected products1

  • composer/bacula-web/bacula-web:< 8.0.0-rc2

🔗 References (6)