Shellfeel

An issue in the software allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.rymcu.forest.web.api.common.UploadController file.

The issue allows a remote attacker to obtain sensitive information via the `getFormKey` parameter in the search function of the FormDataMysqlService.java file. This is a SQL Injection vulnerability.