CVE-2026-112064

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The backend module for reviewing consent history fails to validate sorting, grouping, and index options received in requests before using them in a database query. While filter conditions are bound as parameters, the lack of validation for other options allows a backend user with access to history or statistics functions to perform unauthorized reads of arbitrary database data, including password hashes for both backend and frontend users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.