Threats tagged 'ghsa-vmhx-frwx-8c9h'

A SQL injection vulnerability exists in the drogonframework drogon ORM Mapper component, specifically in the Mapper::orderBy function. This flaw allows remote attackers to manipulate the sort argument to execute SQL injection attacks. The vulnerability affects all versions up to 1.9.13. Exploit code is publicly available, and the vendor has not responded to disclosure requests. The CVSS score is 7.3, indicating a medium severity risk.