CVE-2021-38239 — n/a / n/a

Description (CNA)

SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/dataease/dataease/issues/510

ADP enrichment

CVE

No English description supplied.

https://github.com/dataease/dataease/issues/510

CISA-ADP

No English description supplied.

No references supplied.