Critical severity9.8NVD Advisory· Published Jun 26, 2024· Updated Jun 3, 2026

CVE-2024-4228

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection.

This issue affects SSO (Single Sign On): from 1.0 before 1.1.

Affected products

Aimeos/SSOinferred
Range: >=1.0,<1.1
Package: https://packagist.org/packages/magarsus/sso
Magarsus Consultancy/SSOllm-fuzzy
Range: <1.1

Patches

Vulnerability mechanics

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0800nvd
www.usom.gov.tr/bildirim/tr-24-0800nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000