Threats tagged 'ghsa-cvj7-8m64-3q4v'

This vulnerability in Veeam Backup for Microsoft 365 allows an authenticated organization-transfer peer to perform SQL injection on the source server's configuration database. Exploitation can lead to unauthorized cross-tenant read and write access to configuration data and remote code execution with the privileges of the PostgreSQL service account. The vulnerability is rated critical with a CVSS 4.0 score of 9.0. No affected versions or patch information are provided.