CVE-2024-28393

Publication date

2024-03-25 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess() method.