CVE-2020-24568

2020-10-0218:19:43

mitre

www.cve.org

cve-2020-24568

issue discovered

blind sql injection

mb connect line

mymbconnect24

lancompenent component

logged-in attackers

arbitrary information

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information.

References

mbconnectline.com/security-advice/