CVE-2024-42760

CVE-2024-42760 affects Ellevo v6.2.0.38160. A SQL Injection vulnerability in the /api/mob/instrucao/conta/destinatarios endpoint could allow a remote attacker to obtain sensitive information. Root cause is a SQL Injection flaw in that API path. The standard impact is exposure of confidential data...