CVE-2022-4860

CVE-2022-4860 affects KBase Metrics. Concrete details across connected records show a SQL injection in the function upload_user_data (file src/daily_cron_jobs/methods_upload_user_stats.py). The issue arises from how user data is uploaded, enabling injection under certain inputs. The patch 959dfb6...