PT-2024-22382 · Limbas · Limbas

Lx56 · Published 2024-04-29 · Updated 2025-06-17 · CVE-2024-28294

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Limbas versions up to 5.2.14

Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the ftid parameter.

Recommendations For versions up to 5.2.14, consider restricting access to the ftid parameter to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-28294

Affected Products

Limbas

References · 5

• 🔥 https://gist.github.com/lx39214/248dc58c6d05455d4bd06c4d3df8e2d0 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-28294 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28294 · Vendor Advisory
• https://t.me/cvenotify/125994 · Telegram Post
• https://t.me/cvenotify/78483 · Telegram Post