CVE-2024-11060

Summary

CVE-2024-11060 is a newly discovered critical vulnerability affecting Jinher Network Collaborative Management Platform version 1.0. An unidentified function in the file /C6/JHSoft.Web.AcceptAip/AcceptShow.aspx is the root cause of this issue. The vulnerability can be exploited through sql injection, which is triggered by manipulating the argument id. This attack can be carried out remotely, and the exploit for this vulnerability has been made public, posing a significant threat to systems running this version of the software. Organizations using Jinher Network Collaborative Management Platform are urged to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.