← All advisories

Medium severity6.3NVD Advisory· Published Aug 15, 2024· Updated Jun 17, 2026

CVE-2024-32231

CVE-2024-32231

Description

Stash up to v0.25.1 was discovered to contain a SQL injection vulnerability via the sort parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/stashapp/stashGo	< 0.26.0	0.26.0

Affected products

2

Stash/Stashcpe-rescue
ghsa-coords
pkg:golang/github.com/stashapp/stash
Range: < 0.26.0

Patches

Vulnerability mechanics

References

6

github.com/stashapp/stash/pull/4865nvdPatchWEB
github.com/advisories/GHSA-75jf-52jg-qqh4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-32231ghsaADVISORY
github.com/stashapp/stashghsaPACKAGE
github.com/stashapp/stash/commit/89553864f5fa92beaa37a12e489064b1358d9880ghsaWEB
pkg.go.dev/vuln/GO-2024-3070ghsaWEB

News mentions

0

No linked articles in our index yet.