Imagicle Application Suite (for Cisco UC) before 2021.Summer.2 allows SQL injection. A low-privileged user could inject a SQL statement through the "Export to CSV" feature of the Contact Manager web GUI.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-10-14T00:00:00
Updated: 2023-09-28T13:05:03.309280
Reserved: 2021-10-14T00:00:00
Link: CVE-2021-42369
JSON object: View
NVD Information
Status : Modified
Published: 2021-10-14T18:15:12.887
Modified: 2023-09-28T14:15:13.777
Link: CVE-2021-42369
JSON object: View
Redhat Information
No data.
CWE