CVE-2024-24023 | novel-plus up to 4.3.0-RC1 /novel/bookContent/list offset/limit/sort sql injection

A vulnerability classified as critical was found in novel-plus up to 4.3.0-RC1. Affected by this vulnerability is an unknown functionality of the file /novel/bookContent/list. The manipulation of the argument offset/limit/sort leads to sql injection.

This vulnerability is known as CVE-2024-24023. Access to the local network is required for this attack. There is no exploit available.