Unrated
XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.
CVE-2019-15557
First seen on SecPulse
References
- patch github.com