CVE-2024-6632 — SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

CVE-2024-6632

SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) PUBLISHED

Description (CNA)

A vulnerability exists in FileCatalyst Workflow whereby a field accessible to the super admin can be used to perform an SQL injection attack which can lead to a loss of confidentiality, integrity, and availability.

Affected (CNA)

Vendor / product	Versions
Fortra / FileCatalyst Workflow	affected 5.0.4 through 5.1.6 Build 139

CWE

CWE-89

References

https://www.fortra.com/security/advisories/product-security/fi-2024-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.