Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-7071 EUVD-2024-48067GHSA-cqxm-p8fm-64vf

Unauthenticate SQLi in Brain Information Technologies' Brain Low-Code

Published Aug 27, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 564 - SQL Injection: Hibernate vulnerability in Brain Information Technologies Inc. Brain Low-Code allows SQL Injection.

This issue affects Brain Low-Code: before 2.1.0.

Affected products

VendorProductAffectedFixed
Brain Information Technologies Brain Low-Code < 2.1.0 2.1.0

References