CVE Catalog
CVE-2017-14738
CriticalSummary
FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module.
Risk Assessment
An attacker can exploit this vulnerability to gain access to the database, potentially leading to the disclosure of sensitive information or data modification.
Recommendation
It is recommended to update FileRun to the latest version to mitigate this vulnerability and implement proper input sanitization mechanisms.
Original NVD description (English source)
FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).