Security Advisory

CVE-2024-28389

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-19 00:00:00
Last updated 2024-08-02 15:18:57
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail() method.