Threats tagged 'ghsa-p2pw-xc8c-mvmj'

A SQL injection vulnerability exists in the open-ils.fielder OpenSRF Service component of Evergreen versions up to 3.14.11, 3.15.11, 3.16.5, and 3.17-beta1. The vulnerability is located in an unknown function within the /osrf-gateway-v1 file and can be exploited remotely without authentication. Public exploit code has been disclosed. Upgrading to versions 3.14.12, 3.15.12, 3.16.6, or 3.17-beta2 addresses this issue.