CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions.Referenceshttps://www.esafenet.com/dzwdaqglxthttp://cdg.comhttps://github.com/helloBegin/blog/tree/main
