This vulnerability (CVE-2024-30486) in Max Foundry Media Library Folders arises from improper neutralization of special elements used in SQL commands, classified under CWE-89 (SQL Injection). It affects versions through 8.1.7. The CVSS 3.1 base score is 8.5, indicating high severity, with network attack vector, low attack complexity, low privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. The vulnerability could allow an attacker to manipulate SQL queries, potentially leading to unauthorized data disclosure and partial service disruption. No patch or official remediation level has been published yet.

An attacker with low privileges can exploit this SQL Injection vulnerability remotely without user interaction. The impact includes high confidentiality loss and low availability disruption. Integrity is not impacted. This could lead to unauthorized access to sensitive data and partial denial of service conditions. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. Avoid exposing vulnerable versions to untrusted networks if possible.