CVE-2024-23763: Gambio

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiers[attribute][] parameter.

Affected products

• Gambio Gambio: version 4.9.2.0 only

Published 2024-02-12. Last modified 2026-06-17.