CVE-2024-48253
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 14, 2024
Updated: Oct 16, 2024
CWE ID 89
Summary
CVE-2024-48253 is a newly disclosed vulnerability affecting Cloudlog version 2.6.15. This issue permits SQL injection attacks against the Oqrs.php delete_oqrs_line function, allowing malicious actors to manipulate or delete data with unintended consequences. Successful exploitation of this vulnerability could lead to unauthorized access, data theft, or system disruption. It is recommended that users of Cloudlog version 2.6.15 upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.