CVE-2021-28157

—

CVSS 3.1

7.2 high

EPSS

<1%p56

Published

Apr 14, 2021 (Apr 14, 2021)

Modified

Jun 17, 2026

Description

An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete.

Vendors: devolutions
Products: devolutions server
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.