CVE-2024-25168

The software snow snow (also identified as DingFlow ) version 2.0.0 is vulnerable to a SQL injection vulnerability (CWE-89). A remote attacker can exploit the dataScope parameter of the system/role/list interface to execute arbitrary code. This flaw potentially allows an attacker to access and ma...