CVE-2024-4228 — SQLi in Magarsus Consultancy's SSO
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insuffi…
Published: 2024-06-26 · CVSS: 9.8 · CVSS 3.1
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection. This issue affects SSO (Single Sign On): from 1.0 before 1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7