Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-12245

Blind SQL Injection in Logout

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
BlackDuck

Description

Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LogicalDOC LogicalDOC Community

Default version status: affected

  • 0affected

LogicalDOC LogicalDOC Enterprise

Default version status: affected

  • 0affected

References