Threats tagged 'ghsa-crh6-pvh7-v7wf'

A SQL injection vulnerability exists in Grit42 Grit up to version 0.11.0 within the GritEntityController component. The issue affects an unknown functionality in the file modules/core/backend/app/controllers/concerns/grit/core/grit_entity_controller.rb. This vulnerability can be exploited remotely and the exploit code is publicly available. The vendor has not responded to the disclosure, and no patch or remediation is currently confirmed.