Lucene search

K
cvelistMitreCVELIST:CVE-2024-24017
HistoryFeb 08, 2024 - 12:00 a.m.

CVE-2024-24017

2024-02-0800:00:00
mitre
www.cve.org
2
sql injection
novel-plus v4.3.0-rc1
vulnerability
crafted parameters
/common/dict/list

EPSS

0.001

Percentile

39.1%

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /common/dict/list

EPSS

0.001

Percentile

39.1%

Related for CVELIST:CVE-2024-24017