CVE-2025-1708CWE-89

CVE-2025-1708

High · published July 3, 2025

CVSS v3.1

8.6

EPSS

Percentile

40.8

In the wild

Unconfirmed

What it is

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content.

The record

Technical detail

CVSS v3.1: 8.6 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00484 · 40.8th percentile
Weakness: CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published: 2025-07-03T11:18Z

EPSS history

Timeline