CVE-2024-0941

Summary

CVE-2024-0941 is a critical vulnerability affecting Novel-Plus 4.3.0-RC1. The issue arises from an unsecured processing of the file /novel/bookComment/list, where the argument sort can be manipulated to execute SQL injection. This vulnerability has been disclosed to the public, increasing the risk of exploitation. Vendors were notified but did not respond, leaving users potentially exposed. This SQL injection flaw can lead to unauthorized access or data manipulation. Users are urged to update to the latest version of Novel-Plus as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.