CyberRota Analysis
AI-GeneratedA SQL injection vulnerability in Kiteworks Secure Data Forms allows authenticated users to manipulate stored account data, potentially injecting malicious SQL into database queries due to inadequate input sanitization. This could lead to unauthorized data access or manipulation, making it critical for organizations using this feature to prioritize patching. Security teams should focus on environments where this optional feature is enabled to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitation requires an authenticated session and applies only to deployments where a specific optional feature is in use.