Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.

Published Mar 18, 2026 · Updated Mar 19, 2026 · Assigned by mitre