PT-2024-21654
CVE-2024-27112
·
Published
2024-09-11
·
Updated
2024-09-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SO Planning tool versions prior to 1.52.02
Description
A SQL Injection issue has been found in the SO Planning tool when the public view setting is enabled, allowing an attacker to gain access to the underlying database.
Recommendations
For versions prior to 1.52.02, update to version 1.52.02 to resolve the issue. As a temporary workaround, consider disabling the public view setting until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾