This vulnerability (CVE-2024-32139) in Podlove Podcast Publisher (up to version 4.0.12) is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. The CVSS 3.1 base score is 8.5 (high), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (S:C), with high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation level has been provided by the vendor as of the published date.

An attacker with low privileges can exploit this SQL Injection vulnerability remotely without user interaction to access sensitive data (confidentiality impact is high) and cause a limited denial of service (availability impact is low). Integrity is not impacted. The vulnerability affects all versions of Podlove Podcast Publisher up to 4.0.12. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.