GHSA-w3p9-mvmw-xhwmMediumCVSS 6.8
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL...
🔗 CVE IDs covered (1)
📋 Description
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify information stored in the GMS database.