Mida · Mida Eframework · CVE-2020-15924
**Name of the Vulnerable Software and Affected Versions**
Mida eFramework versions prior to 2.9.1
**Description**
The issue is related to a SQL Injection that leads to Information Disclosure. No authentication is required to exploit this issue. The injection point is located in one of the authentication parameters, specifically in the `authentication parameters`.
**Recommendations**
For versions prior to 2.9.1, update to version 2.9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the authentication parameters to minimize the risk of exploitation.