| Package | Affected versions | Patched versions |
|---|---|---|
| orion platform | = 2019.2= 2019.4= 2020.2.1= 2020.2.4= 2020.2.5 |
An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free