Beveiligingsadvies

CVE-2025-7385

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-04 12:05:55
Laatst bijgewerkt 2025-09-04 13:24:35
Toegewezen door CERT-PL
CVSS-score 9.3
Status PUBLISHED

Beschrijving

Input from search query parameter in GOV CMS is not sanitized properly, leading to a Blind SQL injection vulnerability, which might be exploited by an unauthenticated remote attacker. Versions 4.0 and above are not affected.