This vulnerability (CVE-2024-31260) in WisdmLabs Edwiser Bridge is classified as CWE-89 (SQL Injection). It allows improper neutralization of special elements used in SQL commands, potentially enabling an attacker with high privileges to manipulate SQL queries. The issue affects Edwiser Bridge versions up to 3.0.2. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact. No official patch or remediation level has been published by the vendor as of the current data.

An attacker with high privileges could exploit this SQL Injection vulnerability to manipulate database queries, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict high-privilege access to the Edwiser Bridge application and monitor for any unusual database activity. Applying principle of least privilege to user roles may reduce risk. Avoid exposing the affected application to untrusted networks where possible.