CVE-2018-18476

Published October 24th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.

nedap/mysql-binuuid-rails

Store UUIDs in binary MySQL database columns. Saves storage, and increases performance.

GitHub

60