← Database

CVE-2021-38239

HIGH CVSS: 7.5 Published: 2023-02-15 Modified: 2026-06-17

Description

SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10.

Affected Platforms

Dataease Dataease

Weakness Type

CWE-89, CWE-89

References