CVE-2024-12918

Summary

CVE-2024-12918 is an SQL Injection vulnerability affecting Agito Computer's Health4All software. The issue arises due to improper neutralization of special elements used in SQL commands. Hackers can exploit this vulnerability to inject malicious SQL statements and gain unauthorized access to sensitive data. This security flaw puts all Health4All installations before version 10.01.2025 at risk. It is highly recommended that affected organizations apply the necessary patches to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.