Secuno
ENNL
Book demo

CVE-2024-58385

9.8 CRITICAL
  1. Published15 Sept 2026

Description

Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php configuration endpoint where the DontCheckLogin=1 parameter bypasses authentication and the id parameter is incorporated into SQL queries without sanitization. Attackers can exploit this flaw to execute arbitrary SQL commands and, on Microsoft SQL Server deployments with xp_cmdshell enabled, write backdoor files and execute arbitrary operating system commands. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-13.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-616679.9
DIRAC is an interware, meaning a software framework for distributed computing. Prior to…
CVE-2026-820288.8
Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-reader…
CVE-2026-764619.8
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email…
CVE-2026-554168.8
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19,…
CVE-2026-550728.5
Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an…
CVE-2026-770519.8
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…

Frequently asked

Is CVE-2024-58385 being actively exploited?

CVE-2024-58385 is not in the CISA KEV catalog.

How severe is CVE-2024-58385?

CVE-2024-58385 has a CVSS 3.1 base score of 9.8, rated critical.

How do I fix CVE-2024-58385?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-58385 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.