Description
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPlanAttachDownLoad.aspx.
Critical · 9.4
CVE-2024-25524
EUVD-2024-22852GHSA-39jg-cp5w-9278
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter at /WorkPlan/WorkPl…
Published May 8, 2024 · Updated Aug 1, 2024 · Assigned by mitre