CVE-2024-6632

Name of the Vulnerable Software and Affected Versions FileCatalyst Workflow versions 5.1.6 and earlier

Description A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack, which can lead to a loss of confidentiality, integrity, and availability.

Recommendations For FileCatalyst Workflow versions 5.1.6 and earlier, consider restricting access to the field that the super admin can access to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.