CVE-2023-23634

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/...

Original description

The description as published by the source.

SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory herolab.usd.de
advisory nvd.nist.gov