PT-2023-12333

Name of the Vulnerable Software and Affected Versions dataease versions prior to 1.2.0 Description The issue allows attackers to gain sensitive information via the orders parameter to the "/api/sys msg/list/1/10" API endpoint. This is a SQL Injection vulnerability. Recommendations For versions...