CVE-2024-33147

The J2EEFAST v2.7.0 Java EE enterprise-class rapid development platform contains a SQL injection vulnerability within the authRoleList function. The root cause is a lack of external input SQL statement validation in the sql_filter parameter. An attacker can exploit this flaw to execute unauthoriz...