CVE-2026-34747
Payload has an SQL Injection via Query Handling
概要
Payload has an SQL Injection via Query Handling
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Payload is a free and open source headless content management system. Prior to version 3.79.1, certain request inputs were not properly validated. An attacker could craft requests that influence SQL query execution, potentially exposing or modifying data in collections. This issue has been patched in version 3.79.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com