CVE-2024-1153

4.6 mediumEPSS 0.3%

Medium (4.6) in talyabilisim travel apps. EPSS 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2024-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

talyabilisim:travel_apps

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0809
https://www.usom.gov.tr/bildirim/tr-24-0809
https://www.usom.gov.tr/bildirim/tr-24-0809

Check your stack JSON