CVE-2024-24110: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in crmebjava before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people...