Lucene search

CVE-2024-25515

🗓️ 08 May 2024 15:07:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

RuvarOA v6.01 and v12.01 SQL injection vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
CNVD	RuvarOA sys_file_storage_id parameter SQL injection vulnerability (CNVD-2024-33626)	10 May 202400:00	–	cnvd
Cvelist	CVE-2024-25515	8 May 202400:00	–	cvelist
Vulnrichment	CVE-2024-25515	8 May 202400:00	–	vulnrichment
NVD	CVE-2024-25515	8 May 202415:15	–	nvd

Nvd

Node

ruvar ruvaroaMatch6.01

ruvar ruvaroaMatch12.01

Source	Link
gist	www.gist.github.com/Mr-xn/bc8261a5c3e35a72768723acf1da358d

Parameter	Position	Path	Description	CWE
sys_file_storage_id	query param	/WorkFlow/wf_work_finish_file_down.aspx	SQL injection vulnerability via the sys_file_storage_id parameter.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 May 2024 15:15Current

8.3High risk

Vulners AI Score8.3

CVSS37.3

EPSS0.00079

SSVC

CWE-89