Description
Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.
Critical · 9.9
CVE-2021-42369
EUVD-2021-29340GHSA-x3c3-8c4j-3cfx
Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement thr…
Published Oct 14, 2021 · Updated Aug 4, 2024 · Assigned by mitre