rpm package

almalinux/cyrus-sasl-ldap

pkg:rpm/almalinux/cyrus-sasl-ldap

Vulnerabilities (1)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2022-24407		—		< 2.1.27-6.el8_5	2.1.27-6.el8_5	Feb 23, 2022	In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.

CVE-2022-24407Feb 23, 2022
affected < 2.1.27-6.el8_5fixed 2.1.27-6.el8_5
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.