Beveiligingsadvies

CVE-2024-5311

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-06-03 06:26:52
Laatst bijgewerkt 2024-08-01 21:11:12
Toegewezen door twcert
CVSS-score 9.8
Status PUBLISHED

Beschrijving

DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and delete database records.