← All advisories

Critical severity9.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15570

CVE-2019-15570

Description

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
bedita/beditaPackagist	< 4.0.0	4.0.0

Affected products

9

Bedita/Bedita7 versions
cpe:2.3:a:bedita:bedita:*:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:bedita:bedita:*:*:*:*:*:*:*:*range: <=3.8.0
- cpe:2.3:a:bedita:bedita:4.0.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:bedita:bedita:4.0.0:alpha:*:*:*:*:*:*
- cpe:2.3:a:bedita:bedita:4.0.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:bedita:bedita:4.0.0:beta:*:*:*:*:*:*
- cpe:2.3:a:bedita:bedita:4.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:bedita:bedita:4.0.0:rc:*:*:*:*:*:*
BEdita/BEditadescription
ghsa-coords
pkg:composer/bedita/bedita
Range: < 4.0.0

Patches

Vulnerability mechanics

References

4

github.com/bedita/bedita/pull/1608nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-9gv2-2m38-j6cxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-15570ghsaADVISORY
github.com/bedita/bedita/commit/0ddcd46d645c773e69369f3ed82c865a4d098454ghsaWEB

News mentions

0

No linked articles in our index yet.