CVE-2020-36645: square squalor sql injection
Published Jan 7, 2023
·Updated
A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version v0.0.0 is able to address this issue. The patch is named f6f0a47cc344711042eb0970cb423e6950ba3f93. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217623.
Affected Software
2 affected components
square Squalor Go
squareup Squalor Go
Remediation
Patch Available
Event History
Jan 7, 2023
CVE Published
06:13 PM
Data Sourced
06:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-36645?
CVE-2020-36645 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2020-36645?
CVE-2020-36645 is an SQL injection vulnerability.
3
How do I fix CVE-2020-36645?
To fix CVE-2020-36645, upgrade to version v0.0.0 or later.
4
What software is affected by CVE-2020-36645?
CVE-2020-36645 affects Square Squalor.
5
What is the patch identifier for CVE-2020-36645?
The patch identifier for CVE-2020-36645 is f6f0a47cc344711042eb0970cb423e6950ba3f93.