Unknown · Pearprojectapi · CVE-2023-27113
**Name of the Vulnerable Software and Affected Versions**
pearProjectApi version 2.8.10
**Description**
The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the `organizationCode` parameter at the "project.php" endpoint.
**Recommendations**
For pearProjectApi version 2.8.10, consider restricting access to the `organizationCode` parameter in the project.php endpoint until a patch is available. As a temporary workaround, avoid using the `organizationCode` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.