CVE-2024-32132

CVSS 3.1 Score 7.6 of 10 (high)

Details

Published Apr 15, 2024
CWE ID 89

Summary

CVE-2024-32132 is a newly disclosed SQL Injection vulnerability affecting the CBX Bookmark & Favorite feature of Codeboxr. The vulnerability arises from improper neutralization of special elements in SQL commands, potentially allowing unauthorized users to execute malicious queries. This issue poses a significant risk, especially since it has been identified in versions from n/a to 1.7.20 of the CBX Bookmark & Favorite tool. Users are strongly advised to update their systems as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share