← Back to CVE List

CVE-2021-38239

Published: 2023-02-15T22:15Z
Last Modified: 2025-03-20T14:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt