| Package | Affected versions | Patched versions |
|---|---|---|
| devolutions server | < 2020.3.18< 2021.1 | 2020.3.182021.1 |
An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free