Threats tagged 'ghsa-9ch2-mp4f-8pr5'

A SQL injection vulnerability exists in Dromara MaxKey up to version 3.5.13 in the StrUtils.checkSqlInjection function. This flaw allows remote attackers to manipulate the filtersfields argument to perform SQL injection. Public exploit code is available, and the vendor has not responded to disclosure attempts. The vulnerability has a medium severity rating with a CVSS score of 6.3.