CVE-2019-10766: SQL Injection in usmanhalalit/pixie
Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/usmanhalalit/pixieto a version that resolves this vulnerability.Fixed in 2.0.2 - Upgrade
Upgrade
composer/usmanhalalit/pixieto a version that resolves this vulnerability.Fixed in 1.0.3 - Upgrade
Upgrade
usmanhalalit/pixieto a version that resolves this vulnerability.Fixed in 1.0.3 - Upgrade
Upgrade
usmanhalalit/pixieto a version that resolves this vulnerability.Fixed in 2.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10766?
CVE-2019-10766 has been assigned a moderate severity rating due to its potential to allow SQL injection attacks.
How do I fix CVE-2019-10766?
To fix CVE-2019-10766, upgrade Pixie to version 1.0.3 or 2.0.2 or higher.
What versions are affected by CVE-2019-10766?
CVE-2019-10766 affects Pixie versions 1.0.0 to 1.0.2 and 2.0.0 to 2.0.1.
What type of vulnerability is CVE-2019-10766?
CVE-2019-10766 is an SQL injection vulnerability that arises from improper sanitization in the limit() function.
What can an attacker do with CVE-2019-10766?
An attacker exploiting CVE-2019-10766 can potentially execute arbitrary SQL commands against the database.