This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-12482 →
DEBIAN-CVE-2018-12482
OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
Original description
The description as published by the source.
OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit the issues.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
ocsinventory-server
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5+dfsg-1"}]}]
References
- advisory security-tracker.debian.org