Threats tagged 'ghsa-w5j4-x499-pfwp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.3%	CVE-2026-40524FA · FrontAccounting versions before 2.4.20 have a SQL injection vulnerability in the get_gl_transactions() function High8.1EPSS 0.3%2026-06-29GCVE DatabaseCVE-2026-40524 FrontAccounting versions before 2.4.20 have a SQL injection vulnerability in the get_gl_transactions() function. The vulnerability arises because the filter_type parameter is directly concatenated into a SQL IN() clause without proper parameterization. Attackers with SA_GLANALYTIC permission can exploit this to perform boolean-based blind SQL injection, potentially extracting sensitive journal entry data. EPSS 0.3%Vulnerability CWE-89 #ghsa-w5j4-x499-pfwp	GCVE Database	2026-06-29

Page 1 of 1