Skip to content
fr Sign in
5.1 Medium

CVE-2024-53678 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users can modify form data submitted when requesting a new Block Allocation such that a SELECT SQL statement is modified. The data returned by the SELECT statement is not viewable by the attacker. This issue affects all versions of Apache VCL from 2.2 through 2.5.1. Users are recommended to upgrade to version 2.5.2, which fixes the issue.

Affected products and versions

Product Affected versions Fixed in
Apache VCL 2.2 2.2 → 2.5.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache VCL

The 2 CVEs of Apache VCL →
CVE-2024-53679 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in… 8.4 High
Track this CVE