SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the datapoint export process when asset display names are concatenated into SQL queries without proper escaping. An attacker can exfiltrate database data by injecting malicious SQL through the asset name and retrieving...