Required CVE Record Information
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vertim Neon Product Designer allows SQL Injection. This issue affects Neon Product Designer: from n/a through 2.1.1.
CWE 1 Total
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.3 | CRITICAL | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L |
Credits
- LVT-tholv2k (Patchstack Alliance) finder