CVE-2026-61685

7.5 Élevée

Publiée le 23/09/2026 à 01:17 · Modifiée le 23/09/2026 à 20:12 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

ReactPress is a publishing system for React developers. Prior to version 3.7.0, ReactPress API list endpoints build TypeORM `QueryBuilder` conditions using unsanitized HTTP query parameter names as SQL column identifiers (e.g. `` `article.${key}` ``). TypeORM parameterizes values but not column names, allowing unauthenticated attackers to inject SQL through crafted query string keys. Version 3.7.0 contains a patch. As a workaround, allowlist allowed filter column names before interpolating into SQL.

Traduire en français

Produits concernés

fecommunity reactpress

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-89

Références

https://github.com/fecommunity/reactpress/commit/78ecb70af1c021455c05fdcbe137212c70e310d6
https://github.com/fecommunity/reactpress/releases/tag/v3.7.0
https://github.com/fecommunity/reactpress/security/advisories/GHSA-wmw4-mw6x-6vfm

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories