CVE-2024-42760

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component...

PT-2024-30130 · Ellevo · Ellevo

Name of the Vulnerable Software and Affected Versions: Ellevo version 6.2.0.38160 Description: A SQL Injection vulnerability exists in Ellevo version 6.2.0.38160. This allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component. Recommendation...