VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 13, 2024· Updated Feb 7, 2025

Potential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration files

CVE-2024-52057

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTI Connext Professional (Queuing Service) allows SQL Injection.This issue affects Connext Professional: from 7.0.0 before 7.3.0, from 6.1.0 before 6.1.2.17, from 6.0.0 before 6.0.*, from 5.2.0 before 5.3.*.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Rti/Connext Professionalllm-fuzzy2 versions
    >=5.2.0, <5.3.0, >=6.0.0, <6.1.2.17, >=7.0.0, <7.3.0+ 1 more
    • (no CPE)range: >=5.2.0, <5.3.0, >=6.0.0, <6.1.2.17, >=7.0.0, <7.3.0
    • (no CPE)range: 7.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.