Description
In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.28)
WordPress Plugin Media Library Assistant SQL Injection (2.84)
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-7490)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4198)
Atlassian Jira CVE-2020-36237 Vulnerability (CVE-2020-36237)