Beveiligingsadvies

CVE-2024-4893

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-15 02:31:29
Laatst bijgewerkt 2024-08-01 20:55:10
Toegewezen door twcert
CVSS-score 9.8
Status PUBLISHED

Beschrijving

DigiWin EasyFlow .NET lacks validation for certain input parameters, allowing remote attackers to inject arbitrary SQL commands. This vulnerability enables unauthorized access to read, modify, and delete database records, as well as execute system commands.