You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
roryaronson
published
GHSA-pgq5-ff74-g7xqOct 12, 2023
Package
No package listed
Affected versions
< 15.8.3
Patched versions
15.8.4
Description
Summary
An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table).
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.
Learn more on MITRE.
p- Reporter
Summary
An SQL injection vulnerability was found in FarmBot's web app that allows authenticated attackers to extract arbitrary data from its database (including the user table).
Impact
This issue may lead to Information Disclosure.