CVE-2024-4654

Summary

CVE-2024-4654 is a newly disclosed critical vulnerability affecting BlueNet Technology's Clinical Browsing System version 1.2.1. The issue lies within the /xds/cloudInterface.php file, where manipulation of the INSTI_CODE argument can lead to SQL injection. This vulnerability can be exploited remotely, making it a significant threat. The exploit for this issue has been made public, increasing the risk of it being used maliciously. The associated identifier for this vulnerability is VDB-263499.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.