Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00475·Published 2024-06-26·Fixed in 1.1CWE-89