CVE-2024-8972

Summary

CVE-2024-8972 is a newly identified SQL Injection vulnerability affecting the Mobil365 Informatics Saha365 App. The issue stems from improper handling of special elements in SQL commands, enabling attackers to inject malicious code and potentially gain unauthorized access to sensitive data. This vulnerability, which impacts all versions of Saha365 App prior to the upcoming 30.09.2024 update, poses a significant risk to organizations using this application and underscores the importance of timely software updates and robust cybersecurity practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.