| Package | Affected versions | Patched versions |
|---|---|---|
| fireshare | = 1.2.25 |
FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint: GET /api/videos/public?sort= This parameter is unsafely evaluated in a SQL ORDER BY clause without proper sanitization, allowing an attacker to inject arbitrary SQL subqueries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free