Security Advisory
CVE-2020-18106
9.8
CRITICAL
Vulnerability Description
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
Published Date
August 27, 2021
Official Source
NIST NVD Advisory