CVE-2024-48733
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
SQL injection vulnerability in SAS Studio 9.4 at /SASStudio/sasexec/sessions/{sessionID}/sql allows a remote attacker to execute arbitrary SQL commands via the POST body request. The vendor disputes this, stating that SQL statement execution is allowed for authorized users.
Risk Assessment
The risk involves potential unauthorized database access, data modification, or theft by an attacker exploiting the vulnerability to execute arbitrary SQL queries.
Recommendation
It is recommended to restrict access to the endpoint to trusted users only and implement input validation and parameterized queries to prevent injection attacks.
Other vulnerabilities in SAS Studio
See all- CVE-2024-48735High
A Directory Traversal vulnerability in SAS Studio 9.4 allows a remote attacker to access internal files by manipulating the default path during file download. The attack requires knowledge of the session ID and internal path.
- CVE-2024-48734High
Unrestricted file upload in SAS Studio 9.4 via the path /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} may allow a remote attacker to upload malicious files. The vendor disputes this, stating that file upload is only allowed for authorized users.
Original NVD description (English source)
SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request. NOTE: this is disputed by the vendor because SQL statement execution is allowed for authorized users.