CVE-2020-15924

Name of the Vulnerable Software and Affected Versions Mida eFramework versions prior to 2.9.1

Description The issue is related to a SQL Injection that leads to Information Disclosure. No authentication is required to exploit this issue. The injection point is located in one of the authentication parameters, specifically in the authentication parameters.

Recommendations For versions prior to 2.9.1, update to version 2.9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the authentication parameters to minimize the risk of exploitation.