CVE-2024-57760: SQL Injection
Published Jan 14, 2025
·Updated
JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java.
Affected Software
2 affected components
Jeewms JeeWMS<2025.01.01
Jeewms JeeWMS<2025.01.01
Event History
Jan 14, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 15, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57760?
CVE-2024-57760 is classified as a critical vulnerability due to its potential to allow SQL injection attacks.
2
How do I fix CVE-2024-57760?
To fix CVE-2024-57760, update JeeWMS to version 2025.01.01 or later which addresses the SQL injection vulnerability.
3
What systems are affected by CVE-2024-57760?
CVE-2024-57760 affects JeeWMS versions prior to 2025.01.01.
4
What is the impact of CVE-2024-57760?
The impact of CVE-2024-57760 includes potential unauthorized access to the database and data manipulation.
5
How does CVE-2024-57760 occur?
CVE-2024-57760 occurs due to insufficient input validation of the ReportId parameter in the application.