CVE-2021-27101 FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to an endpoint. The fixed version is FTA_9_12_380 and later.