CVE-2024-32493

Publication date 29 April 2024

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a logged-in agent is able to inject SQL in the draft form ID parameter of an AJAX request.

Status

Package Ubuntu Release Status
znuny 24.10 oracular
Not affected
24.04 LTS noble
Needs evaluation
23.10 mantic Ignored end of life, was needs-triage
22.04 LTS jammy Not in release
20.04 LTS focal Not in release