Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2020-15153

Unauthenticated SQL injection in Ampache

Description

Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ampache ampache

  • < 4.2.2affected

References