CVE-2023-41364 - In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection

CRITICAL

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection

Published Sep 1, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.95%

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://herolab.usd.de/security-advisories/		Third Party Advisory
https://herolab.usd.de/security-advisories/usd-2023-0002/		ExploitThird Party Advisory
https://www.tine-groupware.de/		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 1, 2023

Updated Sep 30, 2024

Reserved Aug 29, 2023

Updated Sep 30, 2024

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a