CVE-2025-64092

CVSS Score & Metrics

Base Score

7.5 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N                                    

This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.

Published Date

January 09, 2026

Last Modified

January 13, 2026

CWE ID

CWE-89

Source

NVD