Lucene search
Veracode Vulnerability DatabaseVERACODE:20863HistoryJul 19, 2019 - 3:16 a.m.
SQL Injection
2019-07-1903:16:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.003
Percentile
69.3%
salt is vulnerable to SQL injection. User-controlled parameter values are directly concatenated into the update password SQL queries, allowing an attacker to inject arbitrary SQL statements via the user and host parameters.
Related
cve
cve
CVE-2019-1010259
2019-07-18 17:15:11
CVE-2019-1000033
2019-07-26 21:15:11
github
github
SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function
2022-05-24 16:50:39
prion
prion
Sql injection
2019-07-18 17:15:00
cvelist
cvelist
CVE-2019-1010259
2019-07-18 16:33:35
nvd
nvd
CVE-2019-1010259
2019-07-18 17:15:11
CVE-2019-1000033
2019-07-26 21:15:11
osv
osv
SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function
2022-05-24 16:50:39
PYSEC-2019-119
2019-07-18 17:15:00
debiancve
debiancve
CVE-2019-1010259
2019-07-18 17:15:11
ubuntucve
ubuntucve
CVE-2019-1010259
2019-07-18 00:00:00