This vulnerability in Brainstorm Force OttoKit (<= 1.1.20) involves improper neutralization of special elements used in SQL commands, leading to a blind SQL injection issue. The CVSS 3.1 score is 7.6, indicating high severity, with an attack vector of network, low attack complexity, and requiring high privileges. The vulnerability impacts confidentiality with high impact, availability with low impact, and no impact on integrity. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker with high privileges to perform blind SQL injection attacks, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and limited denial of service (low availability impact). Integrity is not impacted according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected OttoKit versions to trusted users only, and monitor for unusual database activity. Avoid exposing the vulnerable application to untrusted networks where possible.