CVE-2024-48761 – Celk Saude SQL Injection

The following table lists the changes that have been made to the
CVE-2024-48761 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jan. 29, 2025

    Action Type Old Value New Value
    Added Description The specific component in Celk Saude 3.1.252.1 that processes user input and returns error messages to the client is vulnerable due to improper validation or sanitization of the “erro” parameter. This parameter appears as a response when incorrect credentials are entered during login. The lack of proper validation or sanitization makes the component susceptible to injection attacks, potentially allowing attackers to manipulate the input and exploit the system.
    Added Reference https://github.com/gabriel-bri/vulnerability-research/tree/main/CVE-2024-48761
Share the Post:

Related Posts