critical9.8
CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
Impact
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metaways | Tine | through 2023.01.14.325 |