SQL Injection

Overview tirreno/tirreno is an open-source security analytics platform Affected versions of this package are vulnerable to SQL Injection via the columns0data parameter in the /admin/loadUsers API endpoint. An attacker can execute arbitrary SQL commands by supplying crafted input that is directly...