Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS00NDY1LXIyaGctdjRyas4AAewC

CiviCRM SQL injection vulnerability via Quick Search API

The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.getquick.

Permalink: https://github.com/advisories/GHSA-4465-r2hg-v4rj
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NDY1LXIyaGctdjRyas4AAewC
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 2 years ago
Updated: 9 months ago

Identifiers: GHSA-4465-r2hg-v4rj, CVE-2013-4662
References:

Blast Radius: 0.0

Affected Packages

packagist:civicrm/civicrm-core

Dependent packages: 6
Dependent repositories: 14
Downloads: 173,905 total
Affected Version Ranges: >= 4.3.0, < 4.3.3, >= 4.2.0, < 4.2.9
Fixed in: 4.3.3, 4.2.9
All affected versions:
All unaffected versions: 4.6.0, 4.6.1, 4.6.2, 4.6.3, 4.6.4, 4.6.5, 4.6.6, 4.6.7, 4.6.8, 4.6.9, 4.6.10, 4.6.11, 4.6.12, 4.6.13, 4.6.14, 4.6.15, 4.6.16, 4.6.17, 4.6.18, 4.6.19, 4.6.20, 4.6.21, 4.6.22, 4.6.23, 4.6.24, 4.6.25, 4.6.26, 4.6.27, 4.6.28, 4.6.29, 4.6.30, 4.6.31, 4.6.32, 4.6.33, 4.6.34, 4.6.35, 4.6.36, 4.6.37, 4.6.38, 4.7.0, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.7.6, 4.7.7, 4.7.8, 4.7.9, 4.7.10, 4.7.11, 4.7.12, 4.7.13, 4.7.14, 4.7.15, 4.7.16, 4.7.17, 4.7.18, 4.7.19, 4.7.20, 4.7.21, 4.7.22, 4.7.23, 4.7.24, 4.7.25, 4.7.26, 4.7.27, 4.7.28, 4.7.29, 4.7.30, 4.7.31, 5.0.0, 5.0.1, 5.0.2, 5.1.0, 5.1.1, 5.1.2, 5.2.0, 5.2.1, 5.2.2, 5.3.0, 5.3.1, 5.3.2, 5.4.0, 5.4.1, 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.6.0, 5.6.1, 5.7.0, 5.7.1, 5.7.2, 5.7.3, 5.8.0, 5.8.1, 5.8.2, 5.9.0, 5.9.1, 5.10.0, 5.10.1, 5.10.2, 5.10.3, 5.10.4, 5.11.0, 5.12.0, 5.12.1, 5.12.2, 5.12.3, 5.12.4, 5.13.0, 5.13.1, 5.13.2, 5.13.3, 5.13.4, 5.13.5, 5.14.0, 5.14.1, 5.14.2, 5.15.0, 5.15.1, 5.15.2, 5.16.0, 5.16.1, 5.16.2, 5.16.3, 5.16.4, 5.17.0, 5.17.1, 5.17.2, 5.17.3, 5.17.4, 5.17.5, 5.18.0, 5.18.1, 5.18.2, 5.18.3, 5.18.4, 5.19.0, 5.19.1, 5.19.2, 5.19.3, 5.19.4, 5.20.0, 5.20.1, 5.20.2, 5.20.3, 5.21.0, 5.21.1, 5.21.2, 5.22.0, 5.22.1, 5.23.0, 5.23.1, 5.23.2, 5.23.3, 5.23.4, 5.24.0, 5.24.1, 5.24.2, 5.24.3, 5.24.4, 5.24.5, 5.24.6, 5.25.0, 5.26.0, 5.26.1, 5.26.2, 5.27.0, 5.27.1, 5.27.2, 5.27.3, 5.27.4, 5.28.0, 5.28.1, 5.28.2, 5.28.3, 5.28.4, 5.29.0, 5.29.1, 5.30.0, 5.30.1, 5.31.0, 5.31.1, 5.32.0, 5.32.1, 5.32.2, 5.33.0, 5.33.1, 5.33.2, 5.34.0, 5.35.0, 5.35.1, 5.35.2, 5.36.0, 5.36.1, 5.37.0, 5.37.1, 5.37.2, 5.38.0, 5.38.1, 5.39.0, 5.39.1, 5.40.0, 5.40.1, 5.40.2, 5.40.3, 5.40.4, 5.41.0, 5.41.1, 5.41.2, 5.42.0, 5.42.1, 5.43.0, 5.43.1, 5.43.2, 5.44.0, 5.45.0, 5.45.1, 5.45.2, 5.45.3, 5.46.0, 5.46.1, 5.46.2, 5.46.3, 5.47.0, 5.47.1, 5.47.2, 5.47.3, 5.47.4, 5.48.0, 5.48.1, 5.48.2, 5.49.0, 5.49.1, 5.49.2, 5.49.3, 5.49.4, 5.49.5, 5.50.0, 5.50.1, 5.50.2, 5.50.3, 5.50.4, 5.51.0, 5.51.1, 5.51.2, 5.51.3, 5.52.0, 5.52.1, 5.52.2, 5.52.3, 5.53.0, 5.54.0, 5.54.1, 5.54.2, 5.55.0, 5.55.1, 5.55.2, 5.56.0, 5.56.1, 5.56.2, 5.57.0, 5.57.1, 5.57.2, 5.57.3, 5.58.0, 5.58.1, 5.59.0, 5.59.1, 5.59.2, 5.59.3, 5.59.4, 5.60.0, 5.61.0, 5.61.1, 5.61.2, 5.61.3, 5.61.4, 5.62.0, 5.62.1, 5.63.0, 5.63.1, 5.63.2, 5.63.3, 5.64.0, 5.64.1, 5.64.2, 5.64.3, 5.64.4, 5.65.0, 5.65.1, 5.65.2, 5.66.0, 5.66.1, 5.66.2, 5.67.0, 5.67.1, 5.67.2, 5.67.3, 5.68.0, 5.68.1, 5.69.0, 5.69.1, 5.69.2, 5.69.3, 5.69.4, 5.69.5, 5.70.0, 5.70.1, 5.70.2, 5.71.0, 5.71.1, 5.71.2, 5.72.0, 5.72.1, 5.72.2, 5.72.3, 5.73.0, 5.73.1