Threats tagged 'ghsa-x2hr-mpw9-c694'

An SQL injection vulnerability exists in Atmira’s SIREC where user-supplied JSON input is concatenated into SQL queries without proper sanitization. This flaw allows attackers to alter the intended SQL query, potentially causing the database to return unauthorized or unexpected information. The vulnerability has a high severity rating with a CVSS score of 8.7. No affected versions or patches are specified in the available data.