Vulnerabilitycritical

Apache fixed a critical SQL Injection in Apache Traffic Control

Security Affairsby @securityaffairsDec 26, 2024 · 00:43 UTC (Dec 26, 2024)1 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-45387 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-45387 CVE-2020-17530

Tags: cve-2024-45387 cve-2020-17530 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-17530	Forced OGNL Evaluation RCE in Apache Struts 2.0.0-2.5.25	9.8	96%	KEV	Dec 11, 2020 KEV Nov 3, 2021
CVE-2024-45387	Authenticated SQL Injection in Apache Traffic Control Traffic Ops	8.8	42%		Dec 23, 2024

From the original article

1 min read at securityaffairs.com

Apache Software Foundation (ASF) addressed a critical SQL Injection vulnerability, tracked as CVE-2024-45387, in Apache Traffic Control. The Apache Software Foundation (ASF) released security updates to address a critical security vulnerability, tracked as CVE-2024-45387 (CVSS score 9. 9), in Traffic Control .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.