This vulnerability, identified as CWE-89, is an SQL Injection in the editor component of Amelia versions up to 2.4.9. It allows an attacker with high privileges to inject malicious SQL commands due to improper sanitization of input. The CVSS 3.1 score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact. There is no information about a patch or vendor advisory indicating remediation status.

An attacker with high privileges can exploit this SQL Injection vulnerability to compromise the confidentiality of the database and cause limited availability impact. Integrity impact is not indicated. The vulnerability could lead to unauthorized data disclosure or partial denial of service within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the editor component to trusted users only and monitor for suspicious activity related to SQL commands.