VULNERABILITY INTELLIGENCE

CVE-2024-33276

CVSS score9.8 CRITICAL

EPSS probability0.60%

CISA KEVNot currently listed

Published2024-04-29

Last modified2026-06-17

Description

SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the PreorderModel::getIdProductAttributesByIdAttributes() method.