CVE-2025-11311

Tipray Data Leakage Prevention System 1.0 is affected. The vulnerability lies in the findTenantPage.do file, specifically the findTenantPage function, where manipulation of the sort argument enables SQL injection. Attacks can be initiated remotely, and public exploitation has been disclosed. The ...