CVE-2023-41364

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...

CVE-2023-41364

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection...

CVE-2023-41364

CVE-2023-41364 affects tine (team collaboration software) prior to version 2023.01.14.325. The vulnerability is an SQL Injection in the sort parameter of the /index.php endpoint, caused by unsafely handling input in that parameter. Impact is described by sources as critical (CVSS v3.1: high confi...