What is CVE-2024-4423?

CVE-2024-4423 is a high-severity vulnerability in Cemi Tomasz Pawełek Cemipark, classified under SQL Injection. CVSS score: 7.2/10. Published 2024-05-14.

How severe is CVE-2024-4423?

High severity. CVSS v3 base score is 7.2 out of 10.

SQL Injection in Cemi Tomasz Pawełek Cemipark

CVE-2024-4423

The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass. An attacker who has network access to the login panel can log in with administrator rights to the application.Thi…

Vulnerability class: SQL Injection

EPSS: 0.009 (55.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cemi Tomasz Pawełek Cemipark — versions 4.5, 4.7, 5.03

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cvd@cert.pl (third-party-advisory)
cvd@cert.pl (third-party-advisory)
cvd@cert.pl (product)

Frequently asked questions

What is CVE-2024-4423?: CVE-2024-4423 is a high-severity vulnerability in Cemi Tomasz Pawełek Cemipark, classified under SQL Injection. CVSS score: 7.2/10. Published 2024-05-14.
How severe is CVE-2024-4423?: High severity. CVSS v3 base score is 7.2 out of 10.