CVE Catalog

CVE-2024-53597

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

21th percentile - higher than 21% of all known CVEs

Summary

A SQL injection vulnerability was discovered in masterstack_imgcap v0.0.1 via the /submit endpoint. Attackers can manipulate database queries, potentially leading to unauthorized data access.

Risk Assessment

The risk involves potential leakage or modification of sensitive data stored in the database, compromising system confidentiality and integrity.

Recommendation

Immediately update masterstack_imgcap to the latest patched version or implement parameterized SQL queries in the application code.

Original NVD description (English source)

masterstack_imgcap v0.0.1 was discovered to contain a SQL injection vulnerability via the endpoint /submit.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS