CVE-2024-1301

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 12, 2024
CWE ID 89

Summary

CVE-2024-1301 is a SQL injection vulnerability in Badger Meter Monitool version 4.6.3 and earlier. This vulnerability allows a remote attacker to send a specially crafted SQL query via the j_username parameter and retrieve information stored in the database. The base severity of this vulnerability is rated as CRITICAL with a base score of 9.8 out of 10. The impact includes high integrity and confidentiality risks for organizations. To remediate this vulnerability, users should update to the latest version of Badger Meter Monitool that addresses the issue.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1301 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options