CVE-2024-5523

Name of the Vulnerable Software and Affected Versions Astrotalks version 10/03/2023

Description The issue allows an authenticated local user to send a specially crafted SQL query to the searchString parameter, potentially retrieving all information stored in the database.

Recommendations For version 10/03/2023, consider restricting access to the searchString parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.