CVE-2021-4336

Name of the Vulnerable Software and Affected Versions ITRS Group monitor-ninja versions up to 2021.11.1

Description A critical issue affects some unknown functionality of the file modules/reports/models/scheduled reports.php, leading to sql injection. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For ITRS Group monitor-ninja versions up to 2021.11.1, upgrade to version 2021.11.30 to address this issue. As a temporary workaround, consider restricting access to the file modules/reports/models/scheduled reports.php until the upgrade is applied.