CVE-2024-8503 is a critical time-based SQL injection vulnerability in VICIdial that can be exploited by unauthenticated attackers to enumerate database records. VICIdial stores plaintext credentials by default, increasing the risk of credential compromise. The vulnerability allows full confidentiality, integrity, and availability impact as indicated by a CVSS score of 9.8.