Description
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering
Critical · 9.8
CVE-2024-30923
EUVD-2024-28841GHSA-7xjx-6mf4-7xgc
SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Doc…
Published Apr 18, 2024 · Updated Nov 4, 2025 · Assigned by mitre