CVE-2024-57098

Name of the Vulnerable Software and Affected Versions Moss version v0.1.3

Description The issue is related to an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter. This vulnerability can be exploited by injecting malicious input into the affected parameter.

Recommendations For Moss version v0.1.3, as a temporary workaround, consider restricting access to the order parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.