CVE-2024-51715
CVSS 3.1 Score 8.5 of 10 (high)
Details
Published Jan 7, 2025
CWE ID 89
Summary
CVE-2024-51715 is a newly discovered SQL injection vulnerability affecting ClickWhale's Link Manager, Link Shortener, and Click Tracker for Affiliate Links & Link Pages. The flaw, which enables blind SQL injection, allows unauthorized users to inject malicious SQL queries into the application, potentially leading to unauthorized access or data theft. This issue affects all versions of the software from n/a through 2.4.1. Users are advised to apply the latest patch or upgrade to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.