CVE-2024-9573

Summary

CVE-2024-9573 is a new SQL injection vulnerability affecting SOPlanning versions below 1.45. The issue resides in the /soplanning/www/groupe_list.php file, specifically in the by parameter. Malicious users can exploit this weakness by sending maliciously crafted queries, allowing them to extract all data stored on the server without proper authorization. Unauthorized access to sensitive information can result in significant data breaches and potential financial losses for the affected organization. It is essential to upgrade to the latest version of SOPlanning or apply a patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.