CVE-2024-24019

CVE-2024-24019 — A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions

📅 2024-02-07

🔴 Critical 🔥 No NVD Exploit General CVSS 9.8 🎯 EPSS 0.07%

📋 الوصف الكامل

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/roleDataPerm/list

💻 الأنظمة المتأثرة

A SQL injection

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2024-24019

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v4.3.0

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←