PT-2023-30458 · Knovos · Knovos Discovery

Name of the Vulnerable Software and Affected Versions: Knovos Discovery version 22.67.0 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the "/DiscoveryProcess/Service/Admin.svc/getGridColumnStructure" component. This enables the attacker to potentially...