A critical SQL injection vulnerability in the Tipray Data Leakage Prevention System allows unauthenticated remote attackers to execute arbitrary database commands, posing a severe risk to data integrity.

The application is vulnerable to SQL injection via the sort parameter in the findRolePage function of the findSingConfigPage.do interface. This flaw exists because user-controlled input is passed directly into database queries without proper sanitization, and the application does not enforce authentication for this endpoint.

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive data, potential data exfiltration, or complete compromise of the backend database. Given the 7.3 CVSS score, this represents a significant risk to organizational confidentiality and system integrity. Because the vulnerability is accessible to unauthenticated remote attackers, it provides a low-barrier entry point for malicious actors to impact business operations.

Immediate Action: As no official patch is currently available from the vendor, restrict network access to the affected interface and monitor for suspicious HTTP POST requests targeting the findSingConfigPage.do endpoint.

Proactive Monitoring: Review web server and application logs for anomalous patterns, specifically looking for SQL syntax characters or time-based delay commands in the sort parameter of incoming requests.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block or sanitize malicious SQL injection payloads targeting the identified endpoint, effectively providing a virtual patch until an official update is released.

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the technical write-up provided by the vulnerability researcher.

Organizations utilizing the Tipray Data Leakage Prevention System must prioritize the implementation of compensating controls immediately, as a public proof-of-concept is available and the vendor has not responded to disclosure. Close monitoring of the specific vulnerable endpoint is essential to detect and block potential exploitation attempts while awaiting a formal vendor security update.