CVE-2023-27568

CVE-2023-27568 is a SQL injection vulnerability in Spryker Commerce OS (Spryker Systems GmbH). Connected sources describe an issue in the order history/search form that can allow an attacker to access sensitive data from the database. The vulnerability is evidenced across multiple disclosures: in...