Sparx Pro Cloud Server Broken Access Control Vulnerability Allowing Arbitrary SQL Execution

A broken access control vulnerability has been identified in Sparx Pro Cloud Server, all versions through 6.1. This vulnerability allows low-privileged users to execute arbitrary SQL queries within the context of the database user. The issue arises from a lack of proper permission checks in the application's database communication.

Impact

Exploitation of this vulnerability could lead to unauthorized database access and manipulation, allowing attackers to execute arbitrary SQL commands that could potentially alter or extract sensitive data.