Skip to content
OpenAdvisories
High · 7.2 CVE-2024-6632 EUVD-2024-47691GHSA-h5mc-wcjm-jrgw

SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

Published Aug 27, 2024 · Updated Aug 29, 2024 · Assigned by Fortra

Description

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.

Affected products

VendorProductAffectedFixed
Fortra FileCatalyst Workflow 5.0.4 – ≤ 5.1.6 Build 139 —

References