CVE-2023-46348

SunnyToo sturls is affected by an SQL injection in versions prior to 1.1.13. The vulnerability enables privilege escalation and disclosure of sensitive data via the StUrls::hookActionDispatcher and StUrls::getInstanceId methods. Affected component/functionality includes these two methods in the S...