Beveiligingsadvies

CVE-2025-55472

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-02 00:00:00

Laatst bijgewerkt 2025-09-02 19:49:38

Toegewezen door mitre

CVSS-score 6.5

Status PUBLISHED

Beschrijving

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns[0][data] parameter, which is directly used in SQL queries without proper validation or parameterization.

← Alle CVE's bekijken Bekijk op cve.org ↗