← Database

CVE-2024-42760

HIGH CVSS: 7.5 Published: 2024-09-11 Modified: 2026-06-17

Description

SQL Injection vulnerability in Ellevo v.6.2.0.38160 allows a remote attacker to obtain sensitive information via the /api/mob/instrucao/conta/destinatarios component.

Affected Platforms

Ellevo Ellevo

Weakness Type

CWE-89

References