PT-2024-37761 · Unknown · Filecatalyst Workflow

Published

2024-08-27

·

Updated

2024-09-02

·

CVE-2024-6632

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FileCatalyst Workflow versions 5.1.6 and earlier
Description A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack, which can lead to a loss of confidentiality, integrity, and availability.
Recommendations For FileCatalyst Workflow versions 5.1.6 and earlier, consider restricting access to the field that the super admin can access to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-6632

Affected Products

Filecatalyst Workflow