CVE-2020-36645 MEDIUM

CVE-2020-36645: square squalor sql injection

Vendor Square
Product squalor
Weakness CWE-89 · SQLi
Published January 7, 2023
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version v0.0.0 is able to address this issue. The patch is named f6f0a47cc344711042eb0970cb423e6950ba3f93. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217623.

Key dates

02Disclosure timeline

January 7, 2023 CVE published
August 4, 2024 Record updated