Softinventive: Security Vulnerabilities
Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation (PostgreSQL) by exploiting this issue.
CVSS Score
7.2
EPSS Score
0.044
Published
2022-03-10