Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.

Published Dec 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre