tine SQL Injection Vulnerability

tine is a team collaboration software from tine, Inc. A security vulnerability exists in versions prior to tine 2023.01.14.325, which stems from a sort parameter in the file/index.php endpoint that allows SQL injection...