critical9.8
CVE-2021-30176
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.
Impact
The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zerof | Expert | Version 2.0 |