| Package | Affected versions | Patched versions |
|---|---|---|
| cyrus-sasl | ≥ 2.1.17, ≤ 2.1.27 | |
| communications cloud native core console | = 22.2.0 | |
| communications cloud native core network function cloud native environment | = 22.2.0 | |
| communications cloud native core security edge protection proxy | = 22.1.1 |
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free