CVE-2024-4228: Magarsus Consultancy SSO Single Sign On

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection. This issue affects SSO (Single Sign On): from 1.0 before 1.1.

Affected products

• Magarsus Consultancy SSO Single Sign On: from 1.0, before 1.1 (fixed in 1.1)
• Margarsus Consultancy SSO: from 1.0, before 1.1 (fixed in 1.1)

Published 2024-06-26. Last modified 2026-06-17.