Direct Inward Dialing: +1 408 916 9892
| Vulnerability details | |
| Severity | High |
| CVE ID | CVE-2024-36515 |
| Affected Software Version(s) | All ADAudit Plus builds below 8000 |
| Fixed Version | Build 8000 |
| Fixed on | March 01, 2024 |
An SQL injection vulnerability in ADAudit Plus' Dashboard has been fixed. This vulnerability is different from another vulnerability (CVE-2024-36516), both of which have affected ADAudit Plus' dashboard.
This vulnerability could allow an authenticated adversary to execute custom queries and access the database table entries using the vulnerable request.
Update your ADAudit Plus instance to the latest build — 8000 — using the service pack.
This issue was reported by minhgalaxy.
Please contact support@adauditplus.com for more details.
