the particular flaw exists inside the initCurveList purpose. The issue success through the insufficient correct validation of a consumer-supplied string just before employing it to build SQL queries. An attacker can leverage this vulnerability to execute code within the context of your apache person. Was ZDI-CAN-22683. make sure you deploy the fur