PT-2024-36637
CVE-2024-55984
·
Published
2024-12-18
·
Updated
2024-12-18
Description by
CVSS 3.1
8.5
HighMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Saksh Escrow System versions n/a through 2.4
Description
The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection, potentially enabling malicious actors to manipulate data.
Recommendations
For Saksh Escrow System versions n/a through 2.4, update to a version that includes a fix for this issue to prevent cyber attacks. As a temporary workaround, consider restricting access to sensitive data and ensuring proper input validation to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾