Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2024-24019
HistoryFeb 07, 2024 - 12:00 a.m.

CVE-2024-24019

2024-02-0700:00:00
mitre
github.com
4
sql injection
novel-plus
vulnerability
offset
limit
sort
roledataperm

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A SQL injection vulnerability exists in Novel-Plus v4.3.0-RC1 and prior versions. An attacker can pass in crafted offset, limit, and sort parameters to perform SQL injection via /system/roleDataPerm/list

AI Score

8.1

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-24019