CVE-2024-32231

Stash versions up to v0.25.1 are vulnerable to a SQL injection flaw triggered via the sort parameter . Attackers can exploit this to execute arbitrary SQL queries, potentially leading to the extraction of sensitive database information. To remediate this vulnerability, users should update to vers...