← Back to CVE List

CVE-2022-24407

Published: 2022-02-24T15:15Z
Last Modified: 2024-11-21T06:50Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt