The program plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement. (CVE-2022-24407)
{ "section": "core" }