high7.8
CVE-2024-4461
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows.
Impact
Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.
Affected products
| Product | Affected versions |
|---|---|
| SugarSync | before 4.1.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.