CVE-2023-27167

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?searchmonth=1...

CVE-2023-27167

Summary of CVE-2023-27167 (Suprema BioStar 2) : A SQL injection vulnerability exists in BioStar 2 v2.8.16 where the flaw occurs via the values parameter in the absence endpoint (examples mention /users/absence?search_month=1 or /api/users/absence?search_month=1). The root cause is improper neutra...