CVE-2024-25168

The snow snow software (specifically v.2.0.0 ) contains a SQL injection vulnerability within the system/role/list interface. An attacker can exploit the dataScope parameter to execute arbitrary code, potentially allowing them to access and manipulate sensitive data. While no patch version is curr...