CVE-2024-5276 is a critical SQL Injection vulnerability in Fortra FileCatalyst Workflow, affecting all versions up to 5.1.6 Build 135. This flaw allows attackers to modify application data, potentially creating administrative users or altering/deleting existing data, though data exfiltration is not possible. With a CVSS score of 9.1 (CRITICAL), it can be exploited unauthenticated if anonymous access is enabled, otherwise authentication is required. Exploit code is publicly available via Metasploit and Nuclei templates, and the vulnerability has garnered significant community attention and media coverage, indicating a high likelihood of exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.1.6CPE matchmatch criteria | cpe:2.3:a:fortra:filecatalyst_workflow:*:*:*:*:*:*:*:* | ||
5.1.6CPE matchmatch criteria | cpe:2.3:a:fortra:filecatalyst_workflow:5.1.6:-:*:*:*:*:*:* | ||
5.1.6CPE matchmatch criteria | cpe:2.3:a:fortra:filecatalyst_workflow:5.1.6:build112:*:*:*:*:*:* | ||
5.1.6CPE matchmatch criteria | cpe:2.3:a:fortra:filecatalyst_workflow:5.1.6:build114:*:*:*:*:*:* | ||
5.1.6CPE matchmatch criteria | cpe:2.3:a:fortra:filecatalyst_workflow:5.1.6:build126:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.