CVE-2023-2681 SQL Injection on Jorani

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the...

CVE-2023-2681

CVE-2023-2681 affects Jorani 1.0.0. An SQL Injection vulnerability exists in the /leaves/validate path via the id parameter, exploitable by an authenticated low-privilege user to extract arbitrary data. CVSS v3.1 base score 8.8 (High) with impact to confidentiality, integrity, and availability. T...