This vulnerability (CVE-2024-37494) in KaineLabs Youzify is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. It affects Youzify versions up to 1.2.5. The CVSS 3.1 base score is 8.5 (high), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (S:C), with high confidentiality impact, no integrity impact, and low availability impact. The vulnerability allows an attacker to potentially access sensitive data due to improper input sanitization in SQL queries. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and partial denial of service (low availability impact). Integrity is not impacted. The vulnerability can be exploited remotely over the network by an attacker with low privileges without requiring user interaction. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected application and applying any available input validation or web application firewall rules that might mitigate SQL injection risks.