| Package | Affected versions | Patched versions |
|---|---|---|
| dataease | < 1.2.0 | 1.2.0 |
SQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive information via the orders parameter to /api/sys_msg/list/1/10.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free