CVE-2024-30923

SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering...

CVE-2024-30923

DerbyNet versions 9.0 and below are vulnerable to a SQL Injection flaw within the print/render/racer.inc component. The root cause is the insufficient sanitization of the where parameter within the URL during Racer Document Rendering. A remote attacker can exploit this to achieve arbitrary code e...