Description
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10.
High · 7.5
CVE-2021-38239
EUVD-2021-24697GHSA-gwhh-28wm-q9vf
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_m…
Published Feb 15, 2023 · Updated Mar 20, 2025 · Assigned by mitre