This vulnerability in Bit Apps Bit Form (<= 2.21.10) involves improper neutralization of special elements used in SQL commands, allowing an attacker with high privileges to perform SQL Injection attacks remotely. The CVSS 3.1 score is 7.6, reflecting high severity with network attack vector, low attack complexity, and no user interaction required. The impact includes high confidentiality loss and low availability loss, but no integrity impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges to execute unauthorized SQL commands, potentially leading to disclosure of sensitive data (confidentiality impact) and limited disruption of service (availability impact). Integrity is not affected according to the CVSS vector. There are no known exploits in the wild, which may reduce immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected Bit Form installations to trusted users with high privileges and monitor for suspicious activity related to SQL commands. Avoid exposing the vulnerable application to untrusted networks if possible.