CVE-2024-42760

概要

参考情報

• csflabs.github.io/cve/2024/09/10/cve-2024-42760-sql-injection-in-ellevo-API.html · Exploit
• ellevo.com · Product

ellevo のその他の脆弱性

• CVE-2024-46655中 6.1A reflected cross-site scripting (XSS) vulnerability in Ellevo 6.2.0.38160 allows attackers to execute arbitrary code in the context of a us…
• CVE-2024-42759中 6.3An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.