exploitDog

CVE-2024-24110

Опубликовано: 21 мар. 2024

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

Ссылки

https://github.com/crmeb/crmeb_java/issues/13
Exploit
Issue Tracking
Vendor Advisory
https://github.com/crmeb/crmeb_java/issues/13
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:crmeb:crmeb_java:*:*:*:*:*:*:*:*

Версия до 1.3.4 (исключая)

EPSS

Процентиль: 58%

0.00362

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-4jgg-53cv-7j3q

CVSS3: 6.5

github

почти 2 года назад

SQL Injection vulnerability in crmeb_java before v1.3.4 allows attackers to run arbitrary SQL commands via crafted GET request to the component /api/front/spread/people.

EPSS

Процентиль: 58%

0.00362

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-89