| Package | Affected versions | Patched versions |
|---|---|---|
| orion platform | = 2020.2.6≤ 2020.2.5 |
Numerous exposed dangerous functions within Orion Core has allows for read-only SQL injection leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free