This vulnerability (CVE-2024-32127) in Markus Seyer Find Duplicates is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands (SQL Injection). It affects versions up to 1.4.6 and allows an attacker with network access and low privileges to exploit the flaw without user interaction. The CVSS 3.1 base score is 8.5, reflecting high severity with network attack vector, low attack complexity, and partial impact on confidentiality and availability. No official patch or vendor advisory is currently available, and the software is not a cloud service.

Successful exploitation could lead to partial denial of service and partial confidentiality impact. Integrity is not affected. The attacker requires low privileges and no user interaction, increasing the risk if the software is exposed to untrusted networks. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected application and monitor for unusual activity related to SQL injection attempts. Avoid exposing the application to untrusted networks.