CVE-2024-48223

Name of the Vulnerable Software and Affected Versions Funadmin version 5.0.2

Description The issue is a SQL injection vulnerability located in the /curd/table/fieldlist API endpoint. This allows for potential exploitation by injecting malicious SQL code. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Funadmin version 5.0.2, as a temporary workaround, consider restricting access to the /curd/table/fieldlist API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.