{"id":"CVE-2021-4336","details":"A vulnerability was found in ITRS Group monitor-ninja up to 2021.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file modules/reports/models/scheduled_reports.php. The manipulation leads to sql injection. Upgrading to version 2021.11.30 is able to address this issue. The name of the patch is 6da9080faec9bca1ca5342386c0421dca0a6c0cc. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230084.","modified":"2026-07-09T05:45:45.441420Z","published":"2023-05-28T22:15:09.337Z","references":[{"type":"ADVISORY","url":"https://github.com/ITRS-Group/monitor-ninja/releases/tag/v2021.11.30"},{"type":"ADVISORY","url":"https://vuldb.com/?id.230084"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.230084"},{"type":"FIX","url":"https://github.com/ITRS-Group/monitor-ninja/commit/6da9080faec9bca1ca5342386c0421dca0a6c0cc"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/itrs-group/monitor-ninja","events":[{"introduced":"0"},{"fixed":"516575981a950f39559de1e6c33f04d929759828"},{"fixed":"6da9080faec9bca1ca5342386c0421dca0a6c0cc"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:itrsgroup:ninja:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2021.11.30"}]}}],"versions":["v2021.4.1","v2021.3.1","v2021.2.1","v2020.k.1","v2020.j.1","v2020.i.1","v2020.h.1","v2020.f.1","v2020.e.1","v2020.d.1","v2020.b.1","v2020.a.1","v2019.k.2","v2019.k.1","v2019.j.1","v2019.i.1","v2019.h.1","v2019.g.2","v2019.g.1","v2019.f.1","v2019.e.1","v2019.d.2","v2019.d.1","v2019.c.6","v2019.c.5","v2019.c.4","v2019.c.3","v2019.c.1","v2019.b.2","v2018.l.2","v2018.l.1","v2019.b.1","v2019.a.3","v2018.m.1","v2019.a.2","v2019.a.1","v2018.k.2","v2018.j.2","v2018.i.3","v2018.i.2","v2018.i.1","v2018.h.1","v2018.g.3","v2018.g.1","v2018.f.2","v2018.e.1","v2018.d.1","v2018.c.1","v2018.b.1","v2018.a.1","v2017.o.1","v2017.n.2","v2017.n.1","v2017.m.2","v2017.m.1","v2017.l.1","v2017.k.1","v2017.j.1","v2017.i.1","v2017.h.1","v2017.g.1","v2017.f.1","v2017.e.1","v2017.d.1","v2017.c.1","v2017.b.1","v2017.a.1","v2016.q.1","v2016.p.1","v2016.o.3","v2016.o.2","v2016.o.1","v2016.n.2","v2016.n.1","v2016.m.1","v2016.l.1","v2016.k.1","v2016.j.2","v2016.j.1","v2016.i.3","v2016.i.2","v2016.i.1","v2016.h.1","v2016.g.1","v2016.f.1","v2016.e.1","v2016.d.2","v2016.d.1","v2016.a.2","v2016.a.1","v2015.h.2","v2015.h.1","v2015.g.2","v2015.g.1","v2015.f.2","v2015.f.1","v2015.e.2","v2015.e.1","v2015.d.3","v2015.d.2","v2015.d.1","v2015.c.2","v2015.c.5","v2015.c.4","v2015.c.3","v2015.c.1","v2015.albino.1-beta1","v2015.albino-beta1","v7.1.0-beta7","v7.1.0-beta6","v7.1.0-beta5","v7.1.0-beta4","v7.1.0-beta3","v7.1.0-beta2","v7.1.0-beta1","v3.3.1-beta3","v3.3.1-beta2","v3.3.1-beta1","v3.3.0-beta10","v3.3.0-beta9","v3.3.0-beta8","v3.3.0-beta7","v3.3.0-beta6","v3.3.0-beta5","v3.3.0-beta4","v3.3.0-beta3","v3.3.0-beta2","v3.3.0-beta1","v3.2.0-beta6","v3.2.0-beta5","v3.2.0-beta4","v3.2.0-beta3","v3.2.0-beta2","v3.2.0-beta1","v3.1.0-beta9","v3.1.0-beta8","v3.1.0-beta7","v3.1.0-beta6","v3.1.0-beta5","v3.1.0-beta4","v3.1.0-beta3","v3.1.0-beta2","v3.1.0-beta1","v3.0.2","v3.0.1","v3.0.0","v3.0.0-beta6","v3.0.0-beta5","v3.0.0-beta4","v3.0.0-beta3","v3.0.0-beta2","v3.0.0-beta1","v2.1.0-beta2","v2.1.0-beta1","v2.0.1","v2.0.1-beta4","v2.0.1-beta3","v2.0.1-beta2","v2.0.0","v2.0.1-beta1","v2.0.0-beta13","v2.0.0-beta12","v2.0.0-beta11","v2.0.0-beta10","v2.0.0-beta9","v2.0.0-beta2","v2.0.0-beta1","v1.2.0-beta12","v1.2.0","v1.2.0-beta11","v1.2.0-beta10","v1.2.0-beta9","v1.2.0-beta8","v1.2.0-beta7","v1.2.0-beta6","v1.2.0-beta3","v1.1.14-beta3","v1.1.9-beta3","v1.1.9","v1.1.9-beta2","v1.1.9-beta1","v1.1.8-beta1","v1.1.8","v1.1.7","v1.1.7-beta1","v1.1.6","v1.1.6-beta1","v1.1.5-beta11","v1.1.5","v1.1.5-beta10","v1.1.5-beta9","v1.1.5-beta8","v1.1.5-beta7","v1.1.5-beta6","v1.1.5-beta5","v1.1.5-beta4","v1.1.5-beta3","v1.1.5-beta2","v1.1.5-beta1","v1.1.4-beta1","v1.1.4","v1.1.3","v1.1.2","v1.1.2-beta2","v1.1.2-beta1","v1.1.1-beta6","v1.1.1","v1.1.1-beta5","v1.1.1-beta4","v1.1.1-beta3","v1.1.1-beta2","v1.1.1-beta1","v1.1.0-beta19","v1.1.0","v1.1.0-beta18","v1.1.0-beta17","v1.1.0-beta16","v1.1.0-beta15","v1.1.0-beta14","v1.1.0-beta13","v1.1.0-beta12","v1.1.0-beta11","v1.1.0-beta10","v1.1.0-beta9","v1.1.0-beta8","v1.1.0-beta7","v1.1.0-beta6","v1.1.0-beta5","v1.1.0-beta4","v1.1.0-beta3","v1.1.0-beta2","v1.1.0-beta1","v1.0.1-beta5","v1.0.1","v1.0.1-beta4","v1.0.1-beta3","v1.0.1-beta2","v1.0.1-beta1","v1.0.0","v1.0.0-beta18","v1.0.0-beta17","v1.0.0-beta16","v1.0.0-beta15","v1.0.0-beta14","v1.0.0-beta10","v1.0.0-beta9","v1.0.0-beta8","v1.0.0-beta7","v1.0.0-beta6","v1.0.0-beta5","v1.0.0-beta4","v1.0.0-beta3","v1.0.0-beta2","v1.0.0-beta1","v0.3.6","v0.3.5","v0.3.4","v0.3.3","v0.3.3-beta7","v0.3.3-beta6","v0.3.3-beta5","v0.3.3-beta4","v0.3.3-beta3","v0.3.3-beta2","v0.3.3-beta1","v0.3.2-beta4","v0.3.2","v0.3.2-beta3","v0.3.2-beta2","v0.3.2-beta1","v0.3.1","v0.3.1-beta1","v0.3.0-beta15","v0.3.0","v0.3.0-beta14","0.3.0-beta14","0.3.0-beta13","v0.3.0-beta12","0.3.0-beta12","v0.3.0-beta11","v0.3.0-beta10","v0.3.0-beta9","v0.3.0-beta8","v0.3.0-beta7","v0.2-beta1","v0.0.2","v0.0.1-beta1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4336.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}