Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00421·Published 2024-08-27·Fixed in 2.1.0CWE-89