CVE-2021-23837

CVE-2021-23837 affects flatCore prior to 2.0.0 build 139. A time-based blind SQL injection is present in the selected_folder HTTP request body parameter for the acp interface, where input is not properly sanitized, enabling retrieval of database information. Public details consistently identify t...