CVE-2023-40771

CVE-2023-40771 : DataEase v1.18.9 suffers a SQL injection due to processing a crafted string that bypasses the blacklist function, enabling a remote attacker to obtain sensitive information. The vulnerability is documented across multiple sources (e.g., Red Hat, NVD, GOV advisories) with an affec...