CVE-2024-5311

—

CVSS 3.1

9.8 critical

EPSS

<1%p48

Published

Jun 3, 2024 (Jun 3, 2024)

Modified

Jun 17, 2026

Description

DigiWin EasyFlow .NET lacks validation for certain input parameters. An unauthenticated remote attacker can inject arbitrary SQL commands to read, modify, and delete database records.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.