CVE-2024-9322

Summary

CVE-2024-9322 is a critical vulnerability identified in the Supply Chain Management 1.0 codebase, specifically affecting the /admin/edit_manufacturer.php file, which is susceptible to SQL injection due to improper handling of the argument id. This vulnerability allows for remote exploitation without requiring user interaction or elevated privileges, posing significant risks to an organization, including potential unauthorized access to sensitive data and system integrity breaches. To remediate this issue, it is essential to update or patch the affected product versions as recommended by third-party advisories. The vulnerability has been publicly disclosed, increasing the likelihood of exploitation by malicious actors. Organizations using affected products should prioritize addressing this vulnerability given its high impact on confidentiality and integrity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.