CVE-2024-46636

Published April 27th, 2026

View on NVD ↗

CVSS v3

9.4

CRITICAL

CVSS v2

N/A

Affected

PROJECT

Description

NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter

NU1L0/CVE-2024-46636-SQLi-MODAPS

SQL Injection vulnerability in NASA EOSDIS MODAPS due to improper input validation in the `category` parameter. This flaw allows attackers to manipulate backend SQL queries, potentially leading to unauthorized data access and database compromise.

GitHub