CVE-2024-42760

A SQL Injection vulnerability exists in Ellevo version v.6.2.0.38160 . A remote attacker can exploit this flaw to obtain sensitive information by targeting the /api/mob/instrucao/conta/destinatarios component. While the vulnerability has been sighted in the wild, no specific exploit links are pro...