What is GHSA-jw5c-g9mh-p498?

GHSA-jw5c-g9mh-p498 is a security advisory published by GitHub Security Advisories with Medium severity. The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL...

Which CVE IDs does GHSA-jw5c-g9mh-p498 cover?

GHSA-jw5c-g9mh-p498 covers the following CVE IDs: CVE-2020-3973. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jw5c-g9mh-p498?

GHSA-jw5c-g9mh-p498 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-jw5c-g9mh-p498MediumCVSS 8.8

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 28, 2026

🔗 CVE IDs covered (1)

CVE-2020-3973 →

📋 Description

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-3973
https://www.vmware.com/security/advisories/VMSA-2020-0016.html
https://github.com/advisories/GHSA-jw5c-g9mh-p498