CVE-2023-31433 | evasys up to 8.1/8.x Logbuch welche sql injection

A vulnerability was found in evasys up to 8.1/8.x. It has been rated as critical. Affected by this issue is some unknown functionality of the component Logbuch. The manipulation of the argument welche leads to sql injection. This vulnerability is handled as CVE-2023-31433. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.