{"id":"CVE-2024-40614","aliases":["GHSA-phg7-8mm9-gj88"],"url":"https://o3.security/vulnerability/CVE-2024-40614","summary":"EGroupware mishandles an ORDER BY clause","details":"EGroupware before 23.1.20240624 mishandles an ORDER BY clause. This leads to json.php?menuaction=EGroupware\\Api\\Etemplate\\Widget\\Nextmatch::ajax_get_rows sort.id SQL injection by authenticated users for Address Book or InfoLog sorting.","published":"2024-07-07T00:00:00Z","modified":"2026-08-07T11:49:46.216956410Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"egroupware/egroupware","fixedVersion":"23.1.20240624"}],"fix":{"url":"https://github.com/EGroupware/egroupware/commit/553829d30cc2ccdc0e5a8c5a0e16fa03a3399a3f","label":"EGroupware/egroupware@553829d"},"references":[{"type":"WEB","url":"https://github.com/EGroupware/egroupware/compare/23.1.20240430...23.1.20240624"},{"type":"WEB","url":"https://github.com/EGroupware/egroupware/releases/tag/23.1.20240624"},{"type":"WEB","url":"https://help.egroupware.org/t/egroupware-maintenance-security-release-23-1-20240624/78438"},{"type":"WEB","url":"https://syss.de"},{"type":"WEB","url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-047.txt"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40614.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40614"},{"type":"FIX","url":"https://github.com/EGroupware/egroupware/commit/553829d30cc2ccdc0e5a8c5a0e16fa03a3399a3f"},{"type":"ARTICLE","url":"https://www.syss.de/pentest-blog/sql-injection-schwachstelle-in-egroupware-syss-2024-047"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T11:49:46.216956410Z"}}