https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T20:32:59.461518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-2681 CVE-2023-2681 — SQL Injection on Jorani 2026-10-10T20:32:59.477594+00:00

Affected: Jorani

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the database.