Atmira SIREC SQL injection exposes database information
Atmira SIREC web software can let attackers peek at database information.
Summary
Atmira's SIREC builds SQL statements from user-supplied JSON values without properly sanitising them. A malicious input can alter the query so the database returns unexpected information.
What to do
No fixed version is named. Check that the product is newer than 16/10/2026 and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen