VULNERABILITY INTELLIGENCE
CVE-2021-47763
CVSS score8.2 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-01-15
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Description
Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint.
Weakness classification
- disclosure@vulncheck.com: CWE-89