← Back

Snow

snow

Vendor: Dingflow • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-25168
1Dingflow
1Snow
Jun 17, 2026
Mar 22, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface.