CVE-2021-4308 WebPA sql injection
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2021-4308?
CVE-2021-4308 is a medium-severity vulnerability in WebPA, published on 8 Jan 2023.
Official description
A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version 3.1.2 is able to address this issue. The identifier of the patch is 8836c4f549181e885a68e0e7ca561fdbcbd04bf0. It is recommended to upgrade the affected component. The identifier VDB-217637 was assigned to this vulnerability.
Weakness: CWE-89
Which versions are affected by CVE-2021-4308?
2 open source packages ship an affected version, including webpa/webpa. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
webpa/webpa Packagist | All versions | 3.1.2 |
webpa/webpa Packagist | All versions | 3.1.2 |
Products include Lboro Webpa.
How do I fix CVE-2021-4308?
Upgrade webpa/webpa to 3.1.2 or later.
Is CVE-2021-4308 being exploited?
There is no known exploitation of CVE-2021-4308 in the wild and no public exploit code.
Sources
Also known as GHSA-mjgw-f2c4-f8qj.