CVE-2024-55160

GFast (Go Frame-based backend, v2–v3.2) contains a SQL injection vulnerability in the OrderBy parameter used by /system/operLog/list. Root cause: improper handling/validation of the OrderBy value allows attackers to inject SQL, enabling unauthorized access or data leakage. CVSS v3.1 metrics indic...