This vulnerability (CVE-2024-30491) in Metagauss ProfileGrid is classified as CWE-89 (SQL Injection). It allows an attacker with network access and low privileges to inject malicious SQL commands due to improper sanitization of input. The CVSS 3.1 base score is 8.5, reflecting high impact on confidentiality and low impact on availability, with no user interaction required. The vulnerability affects ProfileGrid versions up to 5.7.8. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and a limited denial of service (low availability impact). Integrity impact is not indicated. The vulnerability requires low privileges and no user interaction, increasing the risk if an attacker can access the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting network access to the affected application and monitor for unusual activity related to SQL injection attempts. Avoid exposing the ProfileGrid interface to untrusted networks.