Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter.

Published Dec 2, 2022 · Updated Jul 9, 2026 · Assigned by mitre