Threats tagged 'ghsa-grcw-mp3h-6wqj'

An unauthenticated SQL injection vulnerability exists in sites using craft.search for search functionality with MySQL/MariaDB databases. The flaw allows execution of stacked queries due to unsanitized concatenation of the attribute parameter and PDO emulated prepares. This enables attackers to read and write to the application database without authentication, including escalating privileges to administrator by modifying user records. The vulnerability is critical with a CVSS score of 9.8. Patched versions 4.18.9 and 5.11.2 address this issue. Temporary mitigation involves blocking front-end requests containing the attribute parameter in the query string.