CVE-2024-42760

A SQL Injection vulnerability exists in Ellevo version 6.2.0.38160 . A remote attacker can exploit this flaw in the /api/mob/instrucao/conta/destinatarios component to obtain sensitive information . Currently, there is no information regarding a newer version that contains a fix for this vulnerab...