Skip to content
OpenAdvisories
High · 8.8 CVE-2024-5523 EUVD-2024-46727GHSA-pwh7-phvx-rxgv

SQL injection vulnerability in Astrotalks

Published May 31, 2024 · Updated Aug 1, 2024 · Assigned by INCIBE

Description

SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database.

Affected products

VendorProductAffectedFixed
Astrotalks Astrotalks 03/10/2023 —

References