CVE-2023-41364
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
Date published : 2023-09-01
https://herolab.usd.de/security-advisories/
https://herolab.usd.de/security-advisories/usd-2023-0002/
