Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

• advisory github.com
• advisory nvd.nist.gov
• patch github.com
• report github.com
• web github.com
• web github.com
• web github.com