Description
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownload.aspx.
Critical · 9.8
CVE-2024-25525
EUVD-2024-22853GHSA-339j-p2wf-p72r
RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter at /WorkFlow/OfficeFileDownloa…
Published May 8, 2024 · Updated Aug 1, 2024 · Assigned by mitre