Security Advisory
CVE-2024-53544
9.8
CRITICAL
Vulnerability Description
NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint.
Published Date
February 24, 2025
Official Source
NIST NVD Advisory