Vulnerability · Published Dec 19, 2022 · Assigned by VulDB

CVE-2021-4262laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection

Medium 5.5

In plain English

A medium-severity security flaw in laravel-jqgrid from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.7%top 46.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is fbc2d94f43d0dc772767a5bdb2681133036f935e. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216271.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	mgallegos/laravel-jqgrid	no fix listed	GHSA-3fhj-wpvj-x5w8

Affected products (as reported)

Vendor	Product	Versions
unspecified	laravel-jqgrid	n/a

Weakness: CWE-707 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References