SQL injection vulnerability exists in the script DIAE_tagHandler.ashx. CreditsMichael Heinzl reported these vulnerabilities to CISA.Referenceshttps://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12
