| Package | Affected versions | Patched versions |
|---|---|---|
| cloudboot | ≤ 2019-03-08 |
CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free