PT-2022-19722

Name of the Vulnerable Software and Affected Versions UniverSIS-API versions through 1.2.1 Description A SQL Injection issue exists, allowing a remote authenticated attacker to send crafted SQL statements to vulnerable API endpoints, such as /api/students/me/messages/, via the select parameter...