CVE-2021-39379: SQL Injection

Published Sep 1, 2021

Updated

A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A malicious attacker can issue SQL commands to the MySQL (MariaDB) database through the ResetUserInfo.php passwordstnid parameter.

Affected Software

1 affected component

OS4ED openSIS=8.0

Event History

Sep 1, 2021

CVE Published

via MITRE·12:41 PM

Data Sourced

via MITRE·12:41 PM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-39379?

The severity of CVE-2021-39379 is critical with a CVSS score of 9.8.

What is CVE-2021-39379?

CVE-2021-39379 is a SQL Injection vulnerability that exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database.

How does the SQL Injection vulnerability in CVE-2021-39379 work?

The SQL Injection vulnerability in CVE-2021-39379 allows a malicious attacker to issue SQL commands to the MySQL (MariaDB) database through the ResetUserInfo.php password_stn_id parameter.

Which software versions are affected by CVE-2021-39379?

CVE-2021-39379 affects openSIS 8.0.

How can the SQL Injection vulnerability in CVE-2021-39379 be mitigated?

To mitigate the SQL Injection vulnerability in CVE-2021-39379, it is recommended to apply the latest security updates provided by the OS4Ed OpenSIS project.