CVE-2024-27515: SQL Injection
Published Feb 28, 2024
·Updated
Osclass 5.1.2 is vulnerable to SQL Injection.
Affected Software
2 affected components
OSClass Osclass
Mindstellar Osclass=5.1.2
Event History
Feb 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs high privileges before exploitation. No user interaction is required.
2
Can this be exploited remotely?
Yes. The attack vector is network-based and has low attack complexity, so the vulnerable functionality can be targeted over a network by an appropriately privileged attacker.
3
What is the potential impact if exploitation succeeds?
The CVSS assessment rates confidentiality, integrity, and availability impact as high. Successful exploitation could therefore expose data, alter data, and disrupt service.
4
Which version is identified as affected?
The provided vulnerability data identifies Osclass 5.1.2 as vulnerable. It does not provide affected-version ranges, fixed versions, or configuration-specific conditions.