PT-2024-32050 · Te Informatics · Nova Cms

Published 2024-10-10 · Updated 2025-10-14 · CVE-2024-4658

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions TE Informatics Nova CMS versions prior to 5.0

Description A SQL Injection vulnerability exists in TE Informatics Nova CMS due to a Hibernate flaw. This issue allows for SQL Injection, which can be exploited.

Recommendations For TE Informatics Nova CMS versions prior to 5.0, update to version 5.0 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-564

CWE-89

Related Identifiers

CVE-2024-4658

Affected Products

Nova Cms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-4658 · Security Note
• https://t.me/cvedetector/7608 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-1661 · Note
• https://twitter.com/Velletron/status/1847847793181720794 · Twitter Post
• https://t.me/cveNotify/138518 · Telegram Post
• https://twitter.com/CVEnew/status/1844375667229499452 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1844518250488512559 · Twitter Post