CVE-2023-24206

Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function...

CVE-2023-24206

Davinci v0.3.0-rc contains a SQL injection vulnerability via the copyDisplay function. Affected software: Davinci (version 0.3.0-rc). Root cause: improper handling in copyDisplay allows SQL injection, enabling attacker-supplied input to affect database queries. Impact (per CVSS in the entry): you...