[CVE-2026-68954] The "pattern" parameter used in search function in the home page of the TMS application is vulnerabl…

Descripción técnica

The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.

Puntuación CVSS

Score: 9/10 — Severidad: CRITICAL — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H

Debilidades (CWE)

CWE-89

Fuente oficial

Publicado en NIST NVD.