CVE-2023-41364 Information

Description

In tine through 2023.01.14.325 the sort parameter of the /index.php endpoint allows SQL Injection.

Reference

https://www.tine-groupware.de/ https://herolab.usd.de/security-advisories/ https://herolab.usd.de/security-advisories/usd-2023-0002/