This vulnerability (CVE-2024-30241) affects Metagauss ProfileGrid and is classified as CWE-89: Improper Neutralization of Special Elements used in an SQL Command (SQL Injection). It allows an attacker with network access and low privileges to inject SQL commands due to insufficient input sanitization. The CVSS 3.1 base score is 8.5, reflecting high severity with network attack vector, low attack complexity, no user interaction, and impacts to confidentiality (high) and availability (low). The vulnerability affects ProfileGrid versions up to 5.7.1. No patch or official remediation level has been published yet.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and minor disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. The attacker requires low privileges and no user interaction, increasing the risk if the system is exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected ProfileGrid installation and monitor for unusual database activity. Avoid exposing the application to untrusted networks. Follow vendor channels for updates on patches or mitigations.