CPE
The Admin REST API is vulnerable to blind SQL injection due to improper input sanitization, allowing an authenticated administrator to extract database information or disrupt service.