PT-2025-9922

CVE-2024-12146

Published

2025-03-06

Updated

2025-03-07

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Finder ERP/CRM (New System) versions prior to 18.12.2024

Description The issue is related to improper validation of syntactic correctness of input, allowing SQL Injection.

Recommendations For versions prior to 18.12.2024, update to a version released after 18.12.2024 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾