CVE-2025-71458

FTS3 Web Monitoring (fts-monitoring ) versions 3.12.0 through 3.13.2 and 3.14.0 are vulnerable to an unauthenticated SQL injection in the /linkinfo endpoint. The flaw resides in the get_linkinfo function, where an attacker can inject SQL via the source_se and dest_se query parameters. This allows...

EUVD-2025-211270

FTS3 Web Monitoring fts-monitoring versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by getlinkinfo. Remote attackers can inject SQL through the sourcese and destse query parameters to perform blind injection and rea...

CVE-2025-71458: cern-fts fts-monitoring: FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection…

FTS3 Web Monitoring fts-monitoring versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by getlinkinfo. Remote attackers can inject SQL through the sourcese and destse query parameters to perform blind injection and rea...