从这个网页截图中,可以获取到以下关于漏洞的关键信息: 1. 漏洞编号: - TVN ID: TVN-202410012 - CVE ID: CVE-2024-9982 2. CVSS评分: - CVSS: 9.8 (Critical) - CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 3. 受影响的产品: - AIM LINE Marketing Platform version from 3.3 to 5.8.4. 4. 描述: - AIM LINE Marketing Platform from Esi Technology does not properly validate a specific query parameter. When the LINE Campaign Module is enabled, unauthenticated remote attackers can inject arbitrary FetchXml commands to read, modify, and delete database content. 5. 解决方案: - Contact the vendor to install the patch or update to version 6.0 or later. 6. 信用: - Xin-Yue Song (CHT Security) 7. 公开日期: - 2024-10-15 8. 链接: - 1. CVE-2024-9982 - 2. 中华资安公告 - 3. CHT Security Advisory 这些信息提供了关于漏洞的基本情况,包括漏洞的识别信息、影响范围、描述、解决方案以及相关的链接资源。