CVE-2021-38145

Vulnerable Component Details
Type Namespace Name Version Package URL
npm @ngx-prism core 2.0.1 pkg:npm/%40ngx-prism/core@2.0.1?package-id=3d7750411bcf4fdf
Vulnerability Details
ID CVE-2021-38145
Description An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries to export a form with data, e.g., manipulation of modules/export_manager/export.php?export_group_id=1&export_group_1_results=all&export_type_id=1.
Ratings
Severity Score Method Vector Source
None None
9.8 CVSSv2 AV:N/AC:L/Au:N/C:P/I:P/A:P
9.8 CVSSv31 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Found By Anchore Grype
References / Advisories