Beveiligingsadvies

CVE-2024-3704

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-12 13:47:03
Laatst bijgewerkt 2024-08-01 20:20:01
Toegewezen door INCIBE
CVSS-score 9.8
Status PUBLISHED

Beschrijving

SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQL code into login page to bypass it or even retrieve all the information stored in the database.