grocery_crud vulnerabilities

CVEs whose affected-version data names the grocery_crud package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2021-47811Critical· 9.1PoC

9mo ago

Grocery crud 1.6.4 - 'order_by' SQL Injection

Grocery Crud 1.6.4 contains a SQL injection vulnerability in the order_by parameter that allows remote attackers to manipulate database queries. Attackers can inject malicious SQL code through the order_by[] parameter in POST requests to…

▾ AbyssalGrocerycrud · Grocery crudEPSS 0.58%via CVEORG