Description
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-31780)
MediaWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-0364)
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2024-21007)
WordPress Plugin Bug Library Cross-Site Scripting (1.4.2)
WordPress Plugin Polldaddy Polls & Ratings Cross-Site Request Forgery (2.0.20)