CVE-2014-8083

SQL injection vulnerability in the Search::setJsonAlert method in OSClass before version 3.4.3 allows remote attackers to execute arbitrary SQL commands via the alert parameter in a search alert subscription action.

An attacker could exploit this vulnerability to gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

It is recommended to update OSClass to version 3.4.3 or later to mitigate this vulnerability and conduct a security audit of the application.