CVE-2023-41364

CVE-2023-41364

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

Source: CVE-2023-41364