CVE-2024-5276: SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)

Published Jun 25, 2024
·
Updated

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data.  Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this vulnerability. Successful unauthenticated exploitation requires a Workflow system with anonymous access enabled, otherwise an authenticated user is required. This issue affects all versions of FileCatalyst Workflow from 5.1.6 Build 135 and earlier.

Affected Software

8 affected components
Fortra FileCatalyst Workflow>5.1.6
Fortra FileCatalyst Workflow<5.1.6
Fortra FileCatalyst Workflow=5.1.6
Fortra FileCatalyst Workflow=5.1.6-build112
Fortra FileCatalyst Workflow=5.1.6-build114
Fortra FileCatalyst Workflow=5.1.6-build126
Fortra FileCatalyst Workflow=5.1.6-build130
Fortra FileCatalyst Workflow=5.1.6-build135

Event History

Jun 25, 2024
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionSeverityWeakness
Jun 26, 2024
News Published
via BleepingComputer·04:56 PM
News Published
via BleepingComputer·04:56 PM

Frequently Asked Questions

1

What is the severity of CVE-2024-5276?

CVE-2024-5276 is classified as a significant SQL Injection vulnerability that allows attackers to modify application data in Fortra FileCatalyst Workflow.

2

How do I fix CVE-2024-5276?

To fix CVE-2024-5276, it's recommended to apply patches or updates provided by Fortra for vulnerable versions of FileCatalyst Workflow.

3

Which versions of Fortra FileCatalyst Workflow are affected by CVE-2024-5276?

CVE-2024-5276 affects Fortra FileCatalyst Workflow version 5.1.6 and earlier.

4

What are the potential impacts of CVE-2024-5276?

The potential impacts of CVE-2024-5276 include unauthorized creation of administrative users and the deletion or modification of data within the application database.

5

Can data exfiltration occur due to CVE-2024-5276?

Data exfiltration via SQL injection is not possible with CVE-2024-5276, focusing mainly on modification of existing data.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203