2021-12-27 11:42:48
mitre
PUBLISHED
Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.