-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from two key functions: 1) Criteria::setLimit() lacked integer casting of input values, noted by the removed '32-bit issue' comment in the commit diff. 2) DBMySQL::applyLimit() directly concatenated user-controlled limit/offset values into SQL queries. The patch added explicit (int) casting in both locations, and test cases demonstrate how non-integer values (including SQL injection payloads) were previously passed through. These functions form the injection vector as they handle LIMIT clause construction without proper input validation.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| propel/propel1 | composer | >= 1, <= 1.7.1 | 1.7.2 |
PHPPHPOngoing coverage of React2Shell