CVE-2020-15924

7.5 highEPSS 1.9%

High (7.5) in midasolutions eframework. EPSS 1.9% chance of exploitation in the next 30 days.

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-07-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

midasolutions:eframework

References

https://elbae.github.io/jekyll/update/2020/07/14/vulns-01.html
https://elbae.github.io/jekyll/update/2020/07/14/vulns-01.html

Check your stack JSON