UISP Application Privilege Escalation Vulnerability via Authenticated SQL Injection
Vulnerability
A series of authenticated SQL injection vulnerabilities have been identified in the UISP Application, affecting versions through 2.4.206. These vulnerabilities could allow a malicious actor with low privileges to escalate privileges within the application.
Impact
Exploitation of these vulnerabilities could lead to unauthorized privilege escalation.
Remediation
Users are advised to update the UISP Application to version 2.4.211 or later.
Added: Jun 29, 2025, 8:18 PM
Updated: Jun 29, 2025, 8:18 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.