CVE-2021-41932

HIGH

TeamMate+ Audit 28.0.19.0 - Authenticated Blind SQL Injection via Search Form

Title source: llm
STIX 2.1

Description

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://mjilek.cz/blog/CVE-2021-41932/

Scores

CVSS v3 8.8
EPSS 0.0100
EPSS Percentile 58.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
wolterskluwer/teammate\+_audit 28.0.19.0
Published Jun 06, 2022
Tracked Since Feb 18, 2026