Security Advisory

CVE-2019-16999

9.8
CRITICAL

Vulnerability Description

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI.
Published Date September 30, 2019
Official Source NIST NVD Advisory