Known Vulnerabilities for Gorose by Fizzday
Listed below are 1 of the newest known vulnerabilities associated with "Gorose" by "Fizzday".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-9047 json | GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled. | 9.8 - CRITICAL | 2019-02-23 | 2019-02-25 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Fizzday | Gorose | 1.0.4 |