Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-24013
HistoryFeb 06, 2024 - 12:00 a.m.

CVE-2024-24013

2024-02-0600:00:00
mitre
github.com
4
sql injection
novel-plus
security vulnerability
crafted parameters
sql injection via url

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass crafted offset, limit, and sort parameters to perform SQL injection via /novel/pay/list

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-24013