CVE-2023-51927

YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...

CVE-2023-51927

YonBIP v3_23.05 is affected by a SQL injection via the runScript() method of com.yonyou.hrcloud.attend.web.AttendScriptController. The vulnerability, described across sources as a SQL injection in YonBIP, has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no authentication, ...