CVE-2024-39250: Efrotech Timetrax

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injection vulnerability via the q parameter in the search web interface.

Affected products

• Efrotech Timetrax: version 8.3 only

Published 2024-07-22. Last modified 2026-06-17.