CVE-2024-52057

Published Dec 13, 2024

Last updated 2 months ago

CVSS critical 9.1

Overview

Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0.*, from 5.2.0 before 5.3.*.
Source
3f572a00-62e2-4423-959a-7ea25eff1638
NVD status
Received

Risk scores

CVSS 4.0

Type
Secondary
Base score
9.1
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
CRITICAL

Weaknesses

3f572a00-62e2-4423-959a-7ea25eff1638
CWE-89

Social media

Hype score
Not currently trending

  1. CVE-2024-52057 SQL Injection Vulnerability in RTI Connext Professional Queuing Service ... https://t.co/LqWHe7P4K2 Vulnerability Notification: https://t.co/xhLrNnfyrO

    @VulmonFeeds

    13 Dec 2024

    15 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References