Lucene search

K
osvGoogleOSV:CVE-2020-21176
HistoryFeb 01, 2021 - 6:15 p.m.

CVE-2020-21176

2021-02-0118:15:13
Google
osv.dev
1
cve-2020-21176
sql injection
thinkjs 3.2.10
remote attackers
arbitrary sql commands
model.increment
model.decrement
software

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

57.6%

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.

AI Score

8.7

Confidence

Low

EPSS

0.002

Percentile

57.6%