CVE-2021-28157

An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL…

published April 14, 2021

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00837 · 57.4th percentile
Published
2021-04-14T19:40Z
EPSS history
Timeline
  • 14 APR 19:40Z
    An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL…
    cvelistv5