cve/2021/CVE-2021-21920.md
2024-05-25 21:48:12 +02:00

850 B
Raw Blame History

CVE-2021-21920

Description

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at surname_filter parameter with the administrative account or through cross-site request forgery.

POC

Reference

Github

No PoCs found on GitHub currently.