| Package | Affected versions | Patched versions |
|---|---|---|
| sql-ledger | ≤ 2.4.3 |
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free