- Project: Services (third-party module) versions prior to 1.x-3.0.2-beta
The module doesn't sufficiently sanitize column names provided by the client when they are querying for data and trying to sort it.
This vulnerability is mitigated by the fact that a site must have an "Index" resource enabled and the attacker must know the endpoint's URL.
If you use the Services module for Backdrop CMS 1.x, upgrade to services1.x-3.0.2-beta
- Geoff St Pierre of the Backdrop Security Team
- John Morahan
- Tyler Frankenstein, a module maintainer
- John Morahan
- Wilmoth Shillingford of the Backdrop Security Team