CVE-2021-41932

CVE-2021-41932 is a high-severity blind SQL injection vulnerability affecting TeamMate+ Audit version 28.0.19.0. This flaw allows any authenticated user to inject malicious SQL queries through the search form, potentially leading to complete database compromise, unauthorized access to sensitive audit data, and information disclosure about other users. With a CVSS score of 8.8 (HIGH), the attack requires low privileges and no user interaction, posing a significant risk to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.