CVE-2022-1883

CVE-2022-1883 affects Terraboard prior to 2.2.0. A SQL injection vulnerability exists in the web API (notably the /api/search/attribute endpoint) where user-supplied parameters (e.g., tf_version) are concatenated into SQL, enabling attackers to craft inputs that alter queries. Impact described ac...