DecaLog SQL Injection Vulnerability

CVE-2024-30245

Summary

A vulnerability has been identified in DecaLog where improper neutralization of special elements used in an SQL command allows for an SQL Injection attack. This vulnerability primarily affects DecaLog versions from prior to 3.9.0 up to and including 3.9.0, enabling attackers to potentially gain unauthorized access to the database, execute arbitrary SQL commands, and retrieve sensitive information. This presents a severe risk to organizations utilizing the affected versions of DecaLog, warranting immediate attention and remediation.

References