This vulnerability in Bit Apps Bit Form (<= 2.21.10) allows SQL Injection due to improper neutralization of special elements in SQL commands. The CVSS 3.1 score is 7.6 (high), with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact affects confidentiality (high) and availability (low), but not integrity. No patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to execute crafted SQL commands that may disclose sensitive information (confidentiality impact) and cause limited disruption to service availability. Integrity is not impacted according to the CVSS vector. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict high-privilege access to the affected Bit Form versions and monitor for unusual database activity. Avoid exposing vulnerable versions to untrusted networks where possible.