CVE-2024-55972

Summary

CVE-2024-55972 is a newly disclosed SQL Injection vulnerability affecting the Chris Carvache eTemplates software. The issue arises from improper handling of special elements in SQL commands, enabling attackers to inject malicious SQL code. This vulnerability poses a significant risk, as it can allow unauthorized access to sensitive data or even full system compromise. The affected versions of eTemplates range from n/a to 0.2.1. It is strongly recommended that users upgrade to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.