Back

CVE-2024-42760

Sept. 11, 2024, 7:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Ellevo

  • 6.2.0.38160

Source

cve@mitre.org

Tags

cve@mitre.org
2024-09-11
CVE-2024-42760

CVE-2024-42760 details

Published : Sept. 11, 2024, 7:15 p.m.
Last Modified : Sept. 11, 2024, 7:15 p.m.

Description

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://csflabs.github.io/cve/2024/09/10/cve-2024-42760-sql-injection-in-ellevo-API.html cve@mitre.org
https://ellevo.com/ cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.