CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint.

Published Jan 16, 2026

https://github.com/advisories/GHSA-hm9j-cgmm-2w36

CVSS ScoreHigh

8.2

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2021-47763

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint.

Published Jan 16, 2026

https://github.com/advisories/GHSA-hm9j-cgmm-2w36

CVSS ScoreHigh

8.2

Ecosystem	Package	Version

No packages found

Try adjusting your search terms.

Find vulnerabilities. Fix fast with AI.

CVE-2021-47763

CVE-2021-47763

No packages found