MunkiReport reportdata module SQL injection vulnerability

ALTO 8.8CVE-2020-15886 · GHSA-qvw9-6567-wq78 · Published 23/07/2020 · updated 17/06/2026

In breve

CVE-2020-15886 è una vulnerabilità ALTO (CVSS 8.8) che riguarda munkireport/reportdata, reportdata (reportdata project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 69.8% delle vulnerabilità.
Correzione: aggiornare a 3.5 o successiva.

Package	Affected versions	Patched versions
munkireport/reportdata Packagist	`< 3.5`	`3.5`
reportdata reportdata_project	`< 3.5`	`3.5`

Description

A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/reportdata/ip endpoint.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2020-15886 · ADVISORY
munkireport/munkireport-php release · WEB
munkireport/munkireport-php release v5.6.3 · WEB
munkireport/munkireport-php · WEB
munkireport/reportdata · PACKAGE
munkireport/reportdata release · WEB
munkireport/munkireport-php

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free