Description
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_work_finish_file_down.aspx.
High · 7.3
CVE-2024-25515
EUVD-2024-22843GHSA-hv8p-cqc6-r6pm
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkFlow/wf_wor…
Published May 8, 2024 · Updated Aug 1, 2024 · Assigned by mitre