CVE-2024-8155

CVE-2024-8155 affects ContiNew Admin 3.2.0. The vulnerability resides in the function top.continew.starter.extension.crud.controller.BaseController#tree used by the endpoint /api/system/dept/tree?sort=parentId,asc&sort=sort,asc . Manipulating the sort argument leads to SQL injection, with remote ...