{"id":86340,"date":"2026-01-21T13:00:49","date_gmt":"2026-01-21T13:00:49","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T06:00:00","slug":"cve-2024-23815-critical-sql-injection-vulnerability-in-desigo-cc-server-application","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2024-23815-critical-sql-injection-vulnerability-in-desigo-cc-server-application\/","title":{"rendered":"CVE-2024-23815: Critical SQL Injection Vulnerability in Desigo CC Server Application<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2024-23815 vulnerability is a critical SQL injection flaw that affects Desigo CC server applications. The vulnerability has potential implications for any organization using Desigo CC, as it allows unauthenticated remote attackers to execute arbitrary SQL queries on the server database. This issue is particularly significant because of its potential for system compromise and data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2024-23815
\nSeverity: High (7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: System compromise and data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n