CVE-2020-25130

Observium (Professional/Enterprise/Community) version 20.8.10631 is vulnerable to SQL Injection via the ajax/actions.php group_id field. The issue arises from how certain parameter types (notably an Array) bypass SQL sanitization, enabling authenticated users to inject SQL and potentially perform...