GHSA-qf9q-q4hh-qph3

Source

https://github.com/advisories/GHSA-qf9q-q4hh-qph3

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/04/GHSA-qf9q-q4hh-qph3/GHSA-qf9q-q4hh-qph3.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-qf9q-q4hh-qph3

Aliases

CVE-2022-29498

Published

2022-04-22T00:00:36Z

Modified

2023-11-08T04:09:13.519087Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

SQL injection in blazer

Details

Blazer before 2.6.0 allows SQL Injection. In certain circumstances, an attacker could get a user to run a query they would not have normally run.

Database specific

{
    "nvd_published_at": "2022-04-21T05:15:00Z",
    "github_reviewed_at": "2022-04-29T21:07:16Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-89"
    ]
}

References

Affected packages

RubyGems / blazer

Package

Name: blazer
Purl: pkg:gem/blazer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.6.0

Affected versions

0.*

0.0.1

0.0.2

0.0.3

0.0.4

0.0.5

0.0.6

0.0.7

0.0.8

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.1.0

1.1.1

1.2.0

1.2.1

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.3.5

1.4.0

1.5.0

1.5.1

1.6.0

1.6.1

1.6.2

1.7.0

1.7.1

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.7.10

1.8.0

1.8.2

1.9.0

2.*

2.0.0

2.0.1

2.0.2

2.1.0

2.2.0

2.2.1

2.2.2

2.2.3

2.2.4

2.2.5

2.2.6

2.2.7

2.2.8

2.3.0

2.3.1

2.4.0

2.4.1

2.4.2

2.4.3

2.4.4

2.4.5

2.4.6

2.4.7

2.4.8

2.5.0