← All advisories

Critical severity9.1NVD Advisory· Published Sep 5, 2024· Updated Jun 17, 2026

CVE-2024-42885

CVE-2024-42885

Description

SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page.

Affected products

2

Esafenet/CDGcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=5.6

Patches

Vulnerability mechanics

References

1

supervisor0.notion.site/ESAFENET-CDG-SQL-Injection-17d7e244810147f697c3c42a884f932bnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.