Vulnerabilitycritical

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

The Hacker Newsby @TheHackersNewsDec 25, 2024 · 13:30 UTC (Dec 25, 2024)1 min read5 · 2 reads

Read at thehackernews.com

Analyze CVE-2024-45387 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-45387 CVE-2024-43441 CVE-2024-56337

Tags: cve-2024-45387 cve-2024-43441 cve-2024-56337 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2024-43441	Authentication Bypass in Apache HugeGraph-Server (CVE-2024-43441)	9.8	69%	Dec 24, 2024
CVE-2024-45387	Authenticated SQL Injection in Apache Traffic Control Traffic Ops	8.8	42%	Dec 23, 2024
CVE-2024-56337	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat	9.8	9%	Dec 20, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 25, 2024 Server Security / Vulnerability The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if successfully exploited, could allow an attacker to execute arbitrary Structured Query Language (SQL) commands in the database. The SQL injection vulnerability, tracked as CVE-2024-45387 , is rated 9. 9 out of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.