{ "id": "CVE-2023-41364", "sourceIdentifier": "cve@mitre.org", "published": "2023-09-01T10:15:08.343", "lastModified": "2023-09-01T11:47:50.290", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection." } ], "metrics": {}, "references": [ { "url": "https://herolab.usd.de/security-advisories/", "source": "cve@mitre.org" }, { "url": "https://herolab.usd.de/security-advisories/usd-2023-0002/", "source": "cve@mitre.org" }, { "url": "https://www.tine-groupware.de/", "source": "cve@mitre.org" } ] }