Threats tagged 'ghsa-wwfr-44pg-7wr5'

Eleveo Call Recording Software version 9.7.0 contains a vulnerability in the Query Builder component affecting the /callrec/searchAction.do file. This flaw results in improper access controls, allowing remote attackers with some privileges to exploit it without user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.3. Public exploit details have been disclosed, but the vendor has not responded or issued a patch.