CVE-2024-35563

Summary

CDG-Server-V5.6.2.126.139 and earlier was discovered to contain a SQL injection vulnerability via the permissionId parameter in CDGTempPermissions.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.esafenet.com/dzwdaqglxt
• http://cdg.com
• https://github.com/helloBegin/blog/tree/main

References

• https://www.esafenet.com/dzwdaqglxt
• https://github.com/helloBegin/blog/tree/main

• ←Previous
• Next→