Medium severity5.4NVD Advisory· Published Apr 22, 2024· Updated Jun 17, 2026

CVE-2024-22856

Description

A SQL injection vulnerability via the Save Favorite Search function in Axefinance Axe Credit Portal >= v.3.0 allows authenticated attackers to execute unintended queries and disclose sensitive information from DB tables via crafted requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Axefinance/Axe Credit Portalllm-fuzzy
Range: >=3.0

Patches

Vulnerability mechanics

References

www.4rth4s.xyz/2024/04/cve-2024-22856-authenticated-blind-sql.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000