Vendor
An unauthenticated remote SQL injection vulnerability in the Drogon framework ORM Mapper allows attackers to manipulate database queries via the sort parameter.