CVE-2024-52495

Summary

CVE-2024-52495 is a new SQL Injection vulnerability affecting the Eniture Technology Distance Based Shipping Calculator. The flaw stems from improper handling of special elements in SQL commands, enabling attackers to inject malicious code and gain unauthorized access to sensitive data. This issue poses a significant risk to versions 2.0.21 and below of the Distance Based Shipping Calculator. Successful exploitation could allow attackers to modify, delete, or steal confidential information, potentially leading to serious data breaches. System administrators are strongly advised to update their installations to the latest, secure version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.