CVE-2020-15153: Unauthenticated SQL injection in Ampache
Published Apr 30, 2021
·Updated
Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch.
Affected Software
1 affected component
Ampache Ampache<4.2.2
Remediation
Event History
Apr 30, 2021
CVE Published
via MITRE·03:20 PM
Data Sourced
via MITRE·03:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is vulnerability CVE-2020-15153?
Vulnerability CVE-2020-15153 is a SQL injection vulnerability in Ampache before version 4.2.2.
2
How severe is vulnerability CVE-2020-15153?
Vulnerability CVE-2020-15153 has a severity rating of 9.8 (Critical).
3
How can unauthenticated users exploit vulnerability CVE-2020-15153?
Unauthenticated users can exploit vulnerability CVE-2020-15153 to perform SQL injection attacks.
4
What is the recommended fix for vulnerability CVE-2020-15153?
To fix vulnerability CVE-2020-15153, update Ampache to version 4.2.2 or the development branch.
5
Where can I find additional information about vulnerability CVE-2020-15153?
You can find additional information about vulnerability CVE-2020-15153 in the referenced GitHub Security Advisory.