CVE-2024-4466

CVSS 3.1 Score 9.8 of 10 (high)

Attack Complexity low
Confidentiality high
Integrity high
Availability high
Scope unchanged
Privileges Required none

Details

Published May 3, 2024
CWE ID 89

Summary

CVE-2024-4466 is a newly disclosed SQL injection vulnerability affecting the Gescen application on centrosdigitales.net. An attacker can exploit this flaw by crafting a malicious SQL query and sending it to the pass parameter. Successful exploitation grants the attacker unauthorized access to all data stored in the underlying database, posing a significant risk to sensitive information. This issue highlights the importance of implementing input validation and sanitization techniques to prevent SQL injection attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share