Jepaas v7.2.8 was discovered to contain a SQL injection vulnerability via the orderSQL parameter at /homePortal/loadUserMsg.

Published Oct 14, 2024 · Updated Mar 18, 2025 · Assigned by mitre