Sql injection

2023-02-1522:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

dataease

vulnerability

sensitive information

api

sys_msg/list

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10.

CPENameOperatorVersion
dataeaselt1.2.0

CPE	Name	Operator	Version
	dataease	lt	1.2.0

References

github.com/dataease/dataease/issues/510